The firewall is set up using the personal setup type, using the email@example.com account (stored in pwsafe 2FA is stored on the same device as the Github 2FA code.
The UDM Pro is not set up for automatic updates for reliability reasons.
We have a 10 GB/s link to DCU's core.
The current elected admins should all have access to the rbadmin account on the firewall. Rootholders should not have access to the firewall unless they are explicity granted access.
The owner account of the unifi equipment is
rbadmins (email: firstname.lastname@example.org) with the password stored
in pwsafe under
There is a "super admin" account that can be used for local access only, details are stored in pwsafe under
The UDM Pro should be kept up to date at all times using the web interface. Please ensure there are no breaking changes before updating.
AUTO UPDATES SHOULD NEVER BE ENABLED!
This is to prevent a bad update from breaking the UDM Pro and thus the entire network. If you are confident that Unifi can produce stable updates, you may turn it on, however please let the next admins know that you have done this (and update these docs with a comment!).
SSH is enabled to allow for rollbacks in case of a bad update (I warned you!).
Remote access is disabled as it should not be needed, the admin vpn should provide enough access for you. If it is enabled in future, please update these docs with your reasons.
Backups are configured to run every week at 1am on a Sunday. 20 backups are stored at a time, therefore storing 20 weeks of configuration. This should be plenty of time to recover from a bad configuration change.
Mordor is natted when it accesses the Internet. This is because the link address between it and DCU is on a private address.
This natting is used only for the UDM pro device itself, not for the 184.108.40.206/24 network, and is to allow the UDM
box itself to access the Internet.
The 220.127.116.11/24 network is routed down to the UDM pro box, within the DCU network. Essentially there is a route in DCU's network that says "if you want to access 18.104.22.168/24 go to mordor".