BI, VPN and Unifi USG

Discussion in 'Blue Iris' started by DLONG2, Aug 27, 2017.

Share This Page

  1. JNDATHP

    JNDATHP Young grasshopper

    Joined:
    Oct 16, 2018
    Messages:
    57
    Likes Received:
    19
    Location:
    USA
    8F65E861-BA53-451D-9ABC-7500F0E6DC30.png C0039ED7-E401-4107-9BD2-0A60B3D2B465.png 4FBE73D0-6B2A-40C3-8944-421908BD1646.png Here is what I have:
     
  2. DLONG2

    DLONG2 Getting comfortable

    Joined:
    May 17, 2017
    Messages:
    188
    Likes Received:
    32
    Otherwise, your VPN allows you to connect to the home network, to other devices, and when you google your IP address from your mobile while in VPN, it will show the WAN address from your ISP?

    In the Unifi controller, on the dashboard, you have the VPN widget running, and it will show 1 active tunnel when you VPN?

    In the Unifi Services/Server, you've enabled the Radius Server. In the Services/Users, what did you enter for each user's VLAN?

    In Blue Iris , in the Options/Web Server/Advanced, you 'require from all connections: Use a secure session keys and login page' and you don't limit IP addresses (left blank)?
     
  3. JNDATHP

    JNDATHP Young grasshopper

    Joined:
    Oct 16, 2018
    Messages:
    57
    Likes Received:
    19
    Location:
    USA
    I can connect to my LAN via VPN and I get an IP address of 192.168.60.1 - I am using my iPhone and haven’t tried or even know how to reach other devices on my LAN.

    Widget shows 0 active tunnel. iPhone shows VPN.

    165F9E98-9691-409C-B8C4-DAE5A10791BB.png

    54464F2F-2927-49D7-9F49-D14F9292F8DD.jpeg
     
  4. JNDATHP

    JNDATHP Young grasshopper

    Joined:
    Oct 16, 2018
    Messages:
    57
    Likes Received:
    19
    Location:
    USA
    35336F71-8CB6-4595-88CD-EE255334D462.png VLAN box is blank in Services/Users.
     
  5. JNDATHP

    JNDATHP Young grasshopper

    Joined:
    Oct 16, 2018
    Messages:
    57
    Likes Received:
    19
    Location:
    USA
    I appreciate the help. This VPN configuration is difficult for me. Thanks.
     
  6. DLONG2

    DLONG2 Getting comfortable

    Joined:
    May 17, 2017
    Messages:
    188
    Likes Received:
    32
    When you navigate to this website while on VPN, the IP shown is the same as your ISP WAN IP, yes?

    What Is My IP? Shows your real IP - IPv4 - IPv6 - WhatIsMyIP.com®

    Or, go to bing.com, and in the search bar, enter in "what is my ip" and hit enter. If it shows the WAN address then you are in your own local network.

    I don't have a cloud key, but only use software to run the Unifi controller, so I am unfamiliar with that aspect of the dashboard, or how an iPad would be any different than a webpage. But on my PC where the software controller is running, my dashboard looks different than yours. When I VPN in, I see a tunnel increment. Your dashboard is showing 0, so I am wondering whether your VPN is really connecting or not.

    Look for the 'Network Analyzer' app in the iTunes store, by Techet. They have a free and a paid version, and will allow you to ping IPs, show network devices, etc. Might help out.

    Also, it never hurts to reboot the iPhone, and maybe stop and restart the Unifi controller.
     
    Last edited: Dec 6, 2018
  7. JNDATHP

    JNDATHP Young grasshopper

    Joined:
    Oct 16, 2018
    Messages:
    57
    Likes Received:
    19
    Location:
    USA
    My IP when connecting VPN is NOT my WAN IP so this may be the problem. I will look into it tomorrow.

    Again, thanks for your help.
     
  8. bob2701

    bob2701 Pulling my weight

    Joined:
    Jan 7, 2016
    Messages:
    664
    Likes Received:
    107
    Location:
    Jersey Shore
    In your BI-VPN group add your WAN address.

    vpngroup.JPG


    Also check the WAN LOCAL and make sure the rules 3003-3006 are there. They should have been added automatically when you created the Remote User VPN network.

    wan local_LI.jpg
     
  9. DLONG2

    DLONG2 Getting comfortable

    Joined:
    May 17, 2017
    Messages:
    188
    Likes Received:
    32
    Thanks, Bob. I had overlooked the need for the WAN IP in the BI-VPN group. Good catch.
     
    bob2701 likes this.
  10. bob2701

    bob2701 Pulling my weight

    Joined:
    Jan 7, 2016
    Messages:
    664
    Likes Received:
    107
    Location:
    Jersey Shore
    Hey, everything I know came from you! :)
     
  11. JNDATHP

    JNDATHP Young grasshopper

    Joined:
    Oct 16, 2018
    Messages:
    57
    Likes Received:
    19
    Location:
    USA
    Making progress, just not there yet. Now getting a tunnel.

    84B11CF8-5A30-407C-90D7-6124E85CDDB3.png
     
  12. bob2701

    bob2701 Pulling my weight

    Joined:
    Jan 7, 2016
    Messages:
    664
    Likes Received:
    107
    Location:
    Jersey Shore
    From your phone with the VPN turned on open your browser and try the “what’s my ip”. You should get the wan address of your system.
     
  13. JNDATHP

    JNDATHP Young grasshopper

    Joined:
    Oct 16, 2018
    Messages:
    57
    Likes Received:
    19
    Location:
    USA
    I’m getting the IP of T-Mobile, not my WAN.
     
  14. DLONG2

    DLONG2 Getting comfortable

    Joined:
    May 17, 2017
    Messages:
    188
    Likes Received:
    32
    Hi Mike,

    The iPhone's VPN has?:

    Type: L2TP
    Server: (WAN address)
    Account: (Name of user set up in the Services/User)
    RSA SecurID: Off
    Password: (User password as set up in the Services/User)
    Secret: (Secret as set up in the Services/Server)
    Send All Traffic: On
    Proxy: Off

    The Services/Server has?:

    Enable: On
    Secret: (filled in)
    Clients: Checked
    Authentication Port: 1812
    Accounting Port: 1813
    Account Interim Interval: 600
    Tunnelled Reply: Off
     
  15. JNDATHP

    JNDATHP Young grasshopper

    Joined:
    Oct 16, 2018
    Messages:
    57
    Likes Received:
    19
    Location:
    USA
    Send all traffic was off. Success!

    Thanks both of you for all your help!

    Michael
     
    bob2701 likes this.
  16. JNDATHP

    JNDATHP Young grasshopper

    Joined:
    Oct 16, 2018
    Messages:
    57
    Likes Received:
    19
    Location:
    USA
    Really do appreciate the help. I have no port forwarding enabled and all apps that need to “talk” to home work with the VPN.

    Does anyone know how to start the VPN after the iPhone reboots?

    Thanks,

    Michael
     
  17. bob2701

    bob2701 Pulling my weight

    Joined:
    Jan 7, 2016
    Messages:
    664
    Likes Received:
    107
    Location:
    Jersey Shore
    Scroll down in settings and you will see VPN, just toggle it on or off.
    Glad to hear you got it all to work.
     
  18. DLONG2

    DLONG2 Getting comfortable

    Joined:
    May 17, 2017
    Messages:
    188
    Likes Received:
    32
  19. JNDATHP

    JNDATHP Young grasshopper

    Joined:
    Oct 16, 2018
    Messages:
    57
    Likes Received:
    19
    Location:
    USA
    With the help of @DLONG2 and @bob2701, I was able to create a working VPN to our home network using UniFi equipment. Using the native iOS VPN wasn’t working for us - it would disconnect at times and then stay disconnected until a manual reconnect. I wanted an always on VPN so it would be transparent to my wife. After all, WAF is important.

    I went hunting on the UniFi forums and found a piece of software from here:

    https://community.ubnt.com/t5/UniFi-...492465#M107742

    This allowed me to set an always on VPN connection to our home network. If it disconnects, it will immediately reconnect.

    We’ve only been using it for a couple of days so I don’t yet know if there are any downsides. I can say that PHLocation and Blue Iris work as expected.

    And, it is comforting to know we have no port forwarding.

    @DLONG2, are you an HS3 user?
     
    Last edited: Dec 10, 2018
    bob2701 likes this.