Ubiquiti Cloud Gateway Ultra and Sunrise Fibre Box 3

a7653021036 · 2024-09-22T13:30:27+00:00

Sunrise Community - Kunden helfen anderen Kunden rund um die Themen Fernsehen, Internet, Telefon und Mobile. Jetzt registrieren!

a7653021036

I recently received the Sunrise Fibre Box 3, I’ve connected it to the OTO socket and confirmed it’s working.

However, I have a Unifi network at home, with my main router being the UCG Ultra. When I connected the UCG Ultra to the Sunrise box, not devices aren’t communicating (the Ubiquiti don’t get a IP and the Sunrise box doesn’t show the UCG as a connected device). So my Sunrise finer connection is completely useless and only able to connect to the internet using my previous internet provide (still active, not fiber).

I learned that the Sunrise Fibre doesn’t allow bridge mode, so does anyone know hoe to make the devices communicate?

Thank you

Daniele_Sunrise

a7653021036 Since there is no bridge mode available for fiber modems, I recommend activating DMZ mode. Your plan would result in a double NAT if all devices are connected to your router.

Greetings
Daniele

a7653021036

Daniele_Sunrise The issue is that the Fiber Box doesn’t provide an IP to the Ubiquiti router, so I cannot even use DMZ…

Daniele_Sunrise

a7653021036 The only other reason I can think of is the same DHCP range of the modem and your UCG (192.168.1.x or 192.168.0.x. Can you change the IP range of your UCG and try again? If it doesn’t work, I recommend reinstalling your router.

Greetings
Daniele

begsbaek

[unbekannt] Hello, I just realized that problem. I can’t believe there is no bridge mode. I was mislead by the sunrise sales guys and now Incant use my Ubiquiti ecosystem that I just bought. Were you able to solve the problem? I am not a geek I am wondering if setting up the DMZ is something I can handle in particular the ongoing maintenance of the security aspects. Kind regards, Bertrand

begsbaek

[unbekannt] test

begsbaek

@"a7653021036 Hello, I just realized that problem. I can’t believe there is no bridge mode. I was mislead by the sunrise sales guys and now Incant use my Ubiquiti ecosystem that I just bought. Were you able to solve the problem? I am not a geek I am wondering if setting up the DMZ is something I can handle in particular the ongoing maintenance of the security aspects. Kind regards, Bertrand

a7653021036

The DMZ works, I just needed to change the IP range for my Ubiquiti router. It is a solution for most of the issuers, but it’s not the best solution to my problem, because I also use some services from a Synology NAS that needs an external IP access. I’m now connecting a 2nd internet service to the WAN2 to resolve this but I will move away from Sunrise as quickly as I can!!!

SAS428

a7653021036 Same situation here! no Bridge mode and additionally no possibility to change the subnet of the Box (Crazy this is a basic functionality). I put a request to change the subnet of my box but if this is not possible I have to spend hours to reconfigure my complete Unifi/Synology ecosystem.

Dear Sunrise please make basic settings available and Im looking forward to the bridge mode in order to take 100% advantage of the fiber broadband

Xydocq

a7653021036 I also use some services from a Synology NAS that needs an external IP access.

I do too, and it works perfecly fine with DMZ.

Xydocq

hello SAS428

We’re going to do some subnetting.

There’s one thing you might be able to try. Your USG uses 192.168.1.6 up to 192.168.1.254 for the LAN Clients on default VLAN1.

This leaves you 192.168.1.1 up to 192.168.1.5 to be used for WAN and the USG Itself.

The 192.168.1.1 is taken by the Connect Box 3 and can’t be changed.

On the WAN Settings change the Connection Type to Static
IP: 192.168.1.2
Subnet: 255.255.255.252
Router (Gateway): 192.168.1.1
For DNS use: 8.8.8.8 and 8.8.4.4 or any other DNS you prefer

On the LAN Settings change the IP from 192.168.1.1 to 192.168.1.5 Apply the settings.

On the Connect Box 3 turn off DHCP and go to Security > DMZ and activated DMZ with 192.168.1.2

I have tested those settings on Zyxel hardware and it seems to work. There are a few downpoints, the Connect Box 3 can’t be reached from any Computer on VLAN1. Pings are slow as molasses. Good enough for a fast fix, but a different subnet on the LAN-side is the better option.

a7653021036

Xydocq Thank you for providing these detailed instructions.

It solved most of my issues (because of double NAT and having DDNS pointing to Synology, I unable to access the address from my network without VPNing first, but the remaining services work).

Xydocq

hello a7653021036

could do describe what you mean by

a7653021036 I unable to access the address from my network without VPNing first,

also what other issues do still persist?

a7653021036

Xydocq

I have one DDNS pointing to the Photos and Audio apps from Synology (like photos.mysynologyaddress.com and audio.mysynologyadress.com, being the mysynologyadress.com a Synology DDNS). When inside my network, the address doesn’t work, I suppose because of the Double NAT. If I’m out of home, the address works - quick fix I found is starting a VPN in the device I want to use these apps while I’m at home.

Xydocq

a7653021036 thank you for the information

the described urls point to the public IP address but not to a local IP address. To use the same url locally you will need a local DNS server. Your Synology has a DNS Server package that can be installed and used. The Hairpin NAT on the Unifi Gateway can’t be used because the public IP and WAN IP of the Unifi Gateway don’t match.

A simple nslookup photos.mysynologyadress.com will state your public IP.

I used the DNS on the Synology to access my own website hosted from the same Synology. Sadly there was a change how DNS is handled by the browsers and this broke the setup I had.

Another option would be to edit the hosts file on a Windows machine. I use this fix on the local Computers. Mobile devices can’t access the site while on the same network. Since I only need access to edit the webpage, it’s no big deal for me. All other access on the local lan is by IP address only. I do not use URL or device names.

a7653021036

Xydocq Thanks to the suggestions, that actually gave me another idea that worked for me. In the UCG Ultra Gateway, I added the DNS addresses as custom DNS routing exceptions, poiting them to the internal Synology IP. This makes Unifi routes all internal requests to these DNS addresses directly to the Synology.

mcnahum

I’m exactly in the same boat… yes DMZ is doing the job but it is an extra layer who is useless…

I hope that an update will provide bridge mode it will simplify our IT life