Question 1

Can the DHCP server handle more than 254 ip addresses?

Accepted Answer

"It depends".
A DHCP server has no problems handing out thousands of addresses to whomever request them, it simply listens and responds with an available ip-address that has not been given out yet.
Having said that, you cannot forget the laws of sub-netting. A class C network can only have 254 hosts (256 - network - broadcast), so NO, you cannot, by definition, have more than 254 DHCP addresses for such network.
If you do your sub-netting with class B, then yes, you can have 65,534 hosts, and ANY DHCP server would be happy to hand out that many addresses.

Question 2

I am not a tech person and have too few funds to personally hire someone to set this up for me. Is tech support available through the seller to assist me with initial setup, VPN connection, and security concerns?

Accepted Answer

There is a forum where several people will answer and help troubleshoot any issues you may have just google Unifi Forums. Just a note, These devices require a computer to run the Unifi Controller that configures them accordingly. The controller is fairly simple, and hosts the network, VPN, Firewall settings and so much more.

Question 3

can this be used with a router if I disable DHCP on the router?

Accepted Answer

This is a router. You could put another router behind it if you'd like.

Question 4

Does the device have any web filtering capability?

Accepted Answer

Yes it does. if said filtering doesnt suit your needs however id recommend using DNS services like Open DNS and forcing DNS at the router as their services are much more elaborate and easy to use

Question 5

Does USG to USG VPN (home to office) require a static ip address or will a dynamic ip address work as well ?  Please excuse the Noobness.

Accepted Answer

I VPN into my USG with a dynamic IP, but it rarely changes.  You use the built in Radius security capability for security.

Question 6

Does anyone know if this is the new USG that has WAN1, LAN1, WAN2/LAN2 or the old WAN, LAN, VOIP?

Accepted Answer

Not sure there is anyway to guarantee that you'll get the newer screen printed versions short of knowing the serial number of manufacture date.    That said, it doesn't really matter functionality wise, just upgrade the firmware to the latest stable version and you can use the VOIP port as WAN2 or LAN2.

Question 7

Has anyone used the Site-to-Site VPN, how was your experience?

Accepted Answer

Site to site VPN worked well, can have multiple VPN connections going (I had 4 sites connected using this)

Like a normal VPN it has to be programmed with each site having a different IP range. Would need to make sure the program you are going to use knows to connect to those other IP addresses

Question 8

Is this PCI compliant for small business credit card processing?

Accepted Answer

Tough question.  In regards to PCI, if you are using a hardware device, enable network segmentation, keep your cards separate from the main network, and monitor and log, then for the most part yes.  Some vendor may not certify a device, simply because while it can do all the things you need, YOU need to configure it properly. You can search PCI Requirement 1 for more info regarding the network, though there are 12 in total I believe.

Question 9

What is the throughput from lan to wan when using NAT?

Accepted Answer

If you don’t use qos, ids or dpi, you can get 1gbps. Turning on qos drops it down to around 75mbps.

Question 10

How does this differ from the ERLite-3?

Accepted Answer

ERLite has a different management interface that is resident on the router itself.  The USG is managed through a separate controller (branded "unifi") that manages routers, switches, and access points from Ubiquiti.  Early on, the ER management interface was more functional than the USG, but over time I think the gap has been closing.  I own a USG and I am pretty happy.

Questions & Answers