QUOTE(aftersix @ Oct 2 2010, 06:00 PM)
I've just registered Unifi with TM, the technicians will be coming to setup by later this month, but I'm kinda panic after I ordered Unifi.
I'm a SoHo, having 3 computers, 2 network printers and 2 NAS in my home working environment, there are also a lot of P&C data in my storage, it MUST NOT be accessible by others. I'm quite panic about the Unifi security issue posted everywhere in the internet. I hope someone can give me a helping hand or suggestion on the following issues:
1. SecurityIs it safe enough I just
disable the the 'Remote Management' and
change the password for both 'admin' and 'operator' account? Can this block TM or attackers by 'easily accessing' to my router? If
NO, please tell me what else can I do to make myself protected.
2. Custom Router / Switchi. Currently I'm using a Switch to connect all my office PCs, printers and also NAS, but in Unifi site, I saw the line:
"...is only compatible with computers that are wireless enabled...". I then google online and I found
The Unifi Handbook - Using Custom Routers, by following the steps provided, we could actually make the TMnet Dlink DIR-615 G1 as a VLAN bridge. If that so, I wonder can I setup my network like this?
'Fiberhome (VDSL) --> Dlink DIR-615 G1 (VLAN bridge) --> My Router --> My Switch --> PCs, network printers, and NAS (with network cables). Is this possible?
ii. Is it encouraged to do a 'custom router' setup? Will this setup slow down the network speed (or slow down when it's using network cable)??
3. IPTVIf the 'Security' and 'Custom Router / Switch' are successfully applied. Will I lost my IPTV service???
1. Yea but its better to push your router into vlan bridge mode following the custom router guide as that will completely prevent users from accessing the TM router unless they have physical access to it.
2. The TM router is compatible with both wired and wireless clients. You can use your own router provided it has a RJ45 WAN port. Normally most soho/business clients I know use the TM DIR-615 as a VLAN bridge so they can wire their cisco routers (using the inbuilt PPPoE) directly to Unifi without going through the DIR-615's NAT + firewall which tends to break a lot of things.
ii. It won't slow you down provided the router you use is capable of handling the 5-20mbps speed. Infact, most people do it to increase the performance and stability of their Unifi setup as the TM provided router is pretty bad. If you like this setup, its recommended you buy a VLAN capable switch such as the Mikrotik RB250GS/750/750G or HP Procurve 8 port switch to perform the VLAN tagging for you to replace the DIR-615 (as you're basically 'hacking' it into a VLAN switch when you set it up that way).
3. No, you won't.. as long as you're only doing the VLAN bridging setup (and not reflashing the unit with dd-wrt).