Skip to content



The firewall is set up using the personal setup type, using the account (stored in pwsafe

2FA is stored on the same device as the Github 2FA code.

Automatic Updates

The UDM Pro is not set up for automatic updates for reliability reasons.

Network Speeds

We have a 10 GB/s link to DCU's core.


The current elected admins should all have access to the rbadmin account on the firewall. Rootholders should not have access to the firewall unless they are explicitly granted access.

The owner account of the unifi equipment is rbadmins (email: with the password stored in pwsafe under unifi.

There is a "super admin" account that can be used for local access only, details are stored in pwsafe under udmpro-super-admin.


The UDM Pro should be kept up to date at all times using the web interface. Please ensure there are no breaking changes before updating.


This is to prevent a bad update from breaking the UDM Pro and thus the entire network.
If you are confident that Unifi can produce stable updates, you may turn it on, however please let the next admins know that you have done this (and update these docs with a comment!).

Advanced Settings

SSH is enabled to allow for rollbacks in case of a bad update (I warned you!).

Remote access is disabled as it should not be needed, the admin VPN should provide enough access for you. If it is enabled in future, please update these docs with your reasons.


Backups are configured to run every week at 1am on a Sunday. 20 backups are stored at a time, therefore storing 20 weeks of configuration. This should be plenty of time to recover from a bad configuration change.

External Addresses

Mordor is NATted when it accesses the Internet. This is because the link address between it and DCU is on a private address.

This NATting is used only for the UDM pro device itself, not for the network, and is to allow the UDM box itself to access the Internet.

The network is routed down to the UDM pro box, within the DCU network. Essentially there is a route in DCU's network that says "if you want to access go to mordor".