UniFi's Brand New High Availability Feature!

UniFi's Brand New High Availability Feature! - Automatic Shadow Mode

Рет қаралды 10,071

Күн бұрын

In this video we'll take a look at the brand new Automatic Shadow Mode feature that will soon be coming all rackmount UniFi Dream Machines with the release of UniFi OS 4.0! This feature finally allows a pair of UDMs to be configured in a high availability pair to facilitate automatic failover in the event of the failure of a single UDM.
Buy from the Ubiquiti Store (Affiliate):
- US: store.ui.com/us/en/pro/produc...
- EU: store.ui.com/eu/en/pro/produc...
www.camerongray.me/
/ camerongray1515
Chapters:
00:00 - Introduction
01:05 - My Test Setup
02:39 - Setting up Automatic Shadow Mode
10:35 - Testing it out!
15:06 - Accessing Protect footage from a failed primary
18:43 - Switching back to the primary UDM
20:19 - Conclusion
AFFILIATE LINKS NOTICE:
Product links under this video marked “(Affiliate)” are affiliate links where I may receive a small commission on qualifying sales. Affiliate programs that I am a member of include, but are not limited to: Amazon Associates, eBay Partner Network and AliExpress Affiliates.
As an Amazon Associate I earn from qualifying purchases.
Purchasing through these affiliate links will not cost you any more money, however the commission earned significantly helps fund the production of videos on my channel.

Пікірлер: 45

@camerongray1515 Ай бұрын

Buy from the Ubiquiti Store (Affiliate): - US: store.ui.com/us/en/pro/products/udm-pro-max?a_aid=CameronGray - EU: store.ui.com/eu/en/pro/products/udm-pro-max?a_aid=CameronGray

@mauriceatkinson9520 Ай бұрын

what is really annoying about people pushing Unifi products is that they never mention they are more than likely out of stock. Point in case is the UDR which has not been in stock for weeks. I do worry about choosing a supplier that can not manage its stock and manufacturing process correctly.

@tomgosy 29 күн бұрын

Absolutely. I ended up finding a second hand UDR after waiting 3 months without luck. That was a while ago now and they're still not in stock

@Polkster13 Ай бұрын

Excellent video and explanation on exactly how this works and what to do in different situations. Since I have UNVR Pro's, I don't have to worry about loosing historical video footage. But I appreciate the very thorough explanations. All of the other videos I have seen on this was just how it failed over and then switched back. Your video is the first I have seen that goes over all of the different scenarios of failure and what to do in each. Bravo.

@enkrypt3d Ай бұрын

I'm wondering if there is a way to sync the footage to the standby over the HA link.....

@chrisragsdale354 7 күн бұрын

That’s weird I have 2 udmse and I got them to sync but I don’t have the option for the auto failover. Maybe it just happens without having to select it now?

@lostwebb Ай бұрын

Great video! Clear and detailed. Have to wonder about adding the other two points of failure to the system though. I wonder if Ub will make a switch device to go between them.

@camerongray1515 Ай бұрын

This setup is only really intended for large networks so you're already going to have LAN switches so you wouldn't really be adding a point of failure there. You are still technically adding one if you need a switch on the WAN side, but switches are generally pretty reliable and if you're at the point of running redundant UDMs, you'd probably also have redundant WAN connections, each with their own switch.

@lostwebb Ай бұрын

Gotcha! Makes sense! Thanks for the reply and video.

@paultech9385 Ай бұрын

Does it support dual WAN assuming the same unifi SFP Adapter? I would be inclined to use 1 LAN trunk port and configure VLANs on downstream switches and manually move over the trunk patch cable. Excellent video!

@camerongray1515 Ай бұрын

Dual WAN works the same way as on a single UDM except with Automatic Shadow Mode you'd connect both WAN connections into both of the UDMs. Not sure what you mean about the trunk port and manually swapping the cable? With Automatic Shadow Mode you'd configure a trunk port on both UDMs and connect both of them to the switches at the same time, that way failover will happen automatically without requiring any cabling changes.

@sunnydavies3990 Ай бұрын

Great video Cameron, would love to see some videos on peplink devices like the balance one 5g

@camerongray1515 Ай бұрын

They do look interesting and I'd love to check them out in the future, but since I don't necessarily have a use for them personally, the cost is unfortunately a bit hard to justify purely to make a video on them.

@Vijaythalapathy28 Ай бұрын

Absolutely amazing video and very clear presentation. Really enjoyed thank you. Could you please link the those clear though patch cables please

@camerongray1515 Ай бұрын

Thanks! These are the exact cables I'm using but you can find similar slim CAT 6 cables from many other suppliers: patchsavesolutions.com/773-slim-small-diameter-pvc-snagless-patch-cables

@Vijaythalapathy28 Ай бұрын

@@camerongray1515thank you so much

@PabloTBrave Ай бұрын

If you were going to the expense of HA you would likely have a separate uvr and not have any cameras on udm. The reason I originally liked unifi was every thing was separate not Kean on the all in the one devices although they are good I personally think it's a backwards step and would prefer just a gateway with 10 GB ports.

@ethernet01 Ай бұрын

gateway with just 10g ports, that would be the UXG

@sweetsdream Ай бұрын

I have a 10g Ethernet with 5g/5g WAN connection so I wonder if the switch between the the WAN and the UDM could be a unifi aggregation switch.

@camerongray1515 Ай бұрын

I can't see why not, although that does raise an interesting situation - with the switch sitting on the WAN side of the UDM, I don't think it would automatically be manageable through the UniFi controller. I haven't tested this but I suspect you'd need to also have the switch connected to your LAN to allow management through UnFi and then add a VLAN that includes all of the ports used for your WAN connection (the ports linking to each UDM and the port(s) uplinking to your ISP).

@Camhin1 Ай бұрын

Will this work with the uxg pro?

@sniff122plays Ай бұрын

this is exactly what i was thinking, i hope it does because it could be super useful at work, as long as it still supports dual WAN

@soerenlaursen9247 Ай бұрын

Does this only work on the new Pro Max or also UDM Pro Se and Pro ?

@camerongray1515 Ай бұрын

This feature is being rolled out to all rackmount UDMs, so that includes the UDM Pro, UDM SE and UDM Pro Max.

@ra55575 Ай бұрын

So how do you now make the two additional switches have the same level of redundancy?

@GuillermoFrontera Ай бұрын

For the most part, in the WAN side yours ISP's modem may have multiple LAN ports than you can connect the UDMs, or you may use 1 simple switch. Simple unmanaged Switches from reputable brands may be really reliable because their simplicity, so they are intrinsically less prompt to failure. On the LAN side you got lots of options, depending on the size of your network, if you have only one downstream core switch you can just connect the 2 UDMs to your core switch. If you have multiple downstream switches you can connect both UDMs to every switch, or you may use STP (Spanning Tree Protocol) to create a Daisy Chain Ring between them. There are looots of options depending on the size of the network, number of switches and which are the critical ones. Cheers!

@tombarber8929 Ай бұрын

On the LAN side, you could have a pair of stacked core switches, and make sure each one has a link going to your access switches. Not sure if that’s something you can setup with a Unifi setup or not, not too familiar with their switches. Also, switches with dual power supplies On the WAN side, it’d depend on what your ISP supports, but if you do just get 1 network port handoff from them, at least going into a reliable dual power supply switch would be a good idea. Having a single point of failure somewhere along the line is something you’ll have to live with, unless you start going down some much more complicated setups, and likely needing more enterprise grade gear

@dbcooper7326 Ай бұрын

Do you need the Max or is it coming to the SE ?

@camerongray1515 Ай бұрын

This will come to all rack mount UDMs - so the UDM Pro, UDM SE and UDM Pro Max should all be getting it!

@VW_Fan Ай бұрын

Does it have any interface tracking features? For example, if your WAN cable gets damaged on the primary and becomes disconnected, would it trigger a failover to keep the internet live to the network? Or would it stay as it is an you would loose connectivity?

@NaokisRC Ай бұрын

You would hope it fails over purely because of the WAN packet loss

@VW_Fan Ай бұрын

@@NaokisRC hope being the key word here

@camerongray1515 Ай бұрын

I haven't tested this, although I suspect not. Automatic Shadow Mode is designed purely to handle the complete loss of a UDM (hardware failure, software crash.etc). When it comes to WAN redundancy, the expected setup would be to have a pair of WAN connections which are both connected to both UDMs.

@KieranMahoney Ай бұрын

Don’t you need to use the Link ports on those switches? How can that work?

@camerongray1515 Ай бұрын

I'm not sure what you mean?

@KieranMahoney Ай бұрын

@@camerongray1515 on the tp link switches, usually you connect the upstream cable to port 5 (labelled Link/Act) and you connect downstream devices to ports 1-4. you connected the uplink cables from the dream machines to ports 3 and 4. how does that work?

@camerongray1515 Ай бұрын

There is no difference between any of the ports, they all work the same. A switch doesn't care which port is used to uplink to the router, it doesn't even see any difference between a router and a client device - all general Layer 2 switches like these do is forward traffic between connected devices based on MAC addresses. You may sometimes see switches with ports labeled "Uplink" but that usually just defines either, a higher speed port (e.g. 10GbE port on an otherwise 1GbE switch, or 1GbE port on an otherwise 10/100 switch) or on a PoE switch it may be used to label a single port that doesn't provide PoE.

@Zoey_yea_boom Ай бұрын

It's a Little disappointing they not replicating video storage between the two units, Might be bandwidth or processor constraints, but surely they could create another interface just dedicated to video traffic but the processor might be harder to overcome.

@TheCheshireCat. Ай бұрын

Oh boy, a mass of cables.

@frag_stone Ай бұрын

What is it for a laptop?

@zocker6468 Ай бұрын

Looks to be a Framework laptop.

@augurseer Ай бұрын

Is video content moved between them?

@davidronan2001 Ай бұрын

Did you look at the video?

@TazBo-wd2ig Күн бұрын

Unifi always have great ideas but OMG their updates can be an absolute nightmare and brick your machine.

@pcislocked Ай бұрын

I honestly think the protect is not reliable enough at the moment. it should maybe have an option to replicate the footage across both nodes/record on both nodes simultaneously, or something along these lines. I dont trust unifi for my own home cctv anyways, and if I were to turn my cctv system into a highly available system i'd simply buy another network video recorder and have it record the same cameras twice