Re:Whistleblower: Ubiquiti Breach “Catastrophic”
by IgorPartola on Tuesday March 30, 2021 @03:05PM
(#26638904)
No, a local controller that you run on a machine inside your LAN.
[ Parent
| on HN ]
Re:Whistleblower: Ubiquiti Breach “Catastrophic”
by coder543 on Tuesday March 30, 2021 @03:30PM
(#26639236)
That's basically what MikroTik CAPsMAN is, depending on your needs.
I think it's specific to Access Points, so not a general purpose centralized controller for MikroTik equipment, but... centralizing access point management seems to be the main thing under discussion here.
Re:Whistleblower: Ubiquiti Breach “Catastrophic”
by taldo on Tuesday March 30, 2021 @03:42PM
(#26639403)
CAPsMAN is a royal PITA to set up. You have to manually add all the wifi channels, map each AP to the channels it'll use, and a lot of busywork. Once it's set up, though, it works fine, and lets you upgrade all devices from the manager, etc.
Re:Whistleblower: Ubiquiti Breach “Catastrophic”
by pilsetnieks on Tuesday March 30, 2021 @04:58PM
(#26640389)
> You have to manually add all the wifi channels, map each AP to the channels it'll use, and a lot of busywork.
No, you don't? I mean you can but you don't need to.
There are cases when that is useful, true - for example, the automatic channel selection makes some curious choices sometimes.
Re:Whistleblower: Ubiquiti Breach “Catastrophic”
by bshep on Tuesday March 30, 2021 @03:33PM
(#26639265)
Their http interface is reasonable and you can configure/provision the APs from CAPSman from one of the routers/switches in a central location.
Re:Whistleblower: Ubiquiti Breach “Catastrophic”
by bombcar on Tuesday March 30, 2021 @04:51PM
(#26640300)
You can also script against the Mikrotik CLI - I use it to update the certificates every ~90 days.
Re:Whistleblower: Ubiquiti Breach “Catastrophic”
by weaksauce on Tuesday March 30, 2021 @04:24PM
(#26639954)
nothing stopping you from using a local ubiquiti controller though. you aren't tied to their servers if you don't want to use them. that said, they seem pretty problematic from a security standpoint based on these leaks and your networking infra should be rock solid.