Connect UniFi to nbn in Australia

Goal and prerequisites

Replace the routing function of an existing internet router with a UniFi gateway while retaining any required nbn connection equipment or DSL modem. You need your service's exact connection technology, activation status, ISP WAN settings, login credentials where required, and a record of the original cabling. Complete this work while you can restore the original router if necessary.

The nbn access technology determines the physical handoff. Your retail provider determines authentication and any service VLAN. A home-network VLAN such as Main VLAN 10 is unrelated to an ISP's WAN VLAN. [1] [2]

Connection type Equipment before the UniFi WAN port
FTTP The active Ethernet service port on the nbn connection box
HFC The Ethernet port on the nbn HFC connection box
FTTC The Ethernet port on the nbn connection device
Fixed Wireless The active Ethernet service port on the indoor nbn equipment
FTTN or nbn FTTB A compatible VDSL2 modem, normally configured as a bridge when UniFi performs routing

These examples concern nbn services. A private fibre network or a provider's own FTTB service may use different equipment and authentication. Confirm the service rather than relying on the apartment building's appearance. [2]

Configure the connection

  1. Create a connection record. Write down the ISP, connection technology, active service port, authentication type, WAN VLAN if any, and any static address details. Confirm whether a telephone service relies on the provider's router. Do not assume that replacing the router preserves its voice service.
  2. Verify the existing service. Test a computer through the current router before changing anything. If that already fails, resolve the underlying service problem first. Photograph cable positions and save the router's configuration if it supports an export.
  3. Connect an Ethernet handoff. For FTTP, HFC, FTTC and Fixed Wireless, leave the nbn device in place and connect its designated Ethernet service port to the UniFi WAN port. The nbn device and UniFi gateway each need their normal power supply. Do not substitute a different nbn service port without confirming it is provisioned. [1]
  4. Handle FTTN or FTTB separately. UniFi Ethernet gateways do not provide the VDSL2 line interface. Use a compatible VDSL2 modem and its manufacturer-specific bridge procedure. Confirm DSL synchronisation first. Let the bridge pass the service to the UniFi WAN and configure any required authentication on the UniFi gateway. Apply the service VLAN at the location specified for that bridge design; do not accidentally tag the same service twice. Retain modem access instructions before changing its mode.
  5. Enter the WAN settings. During the gateway wizard, or in Network Settings by searching for Internet and selecting the connected WAN, choose DHCP for an IPoE service or PPPoE for a service that requires a username and password. Leave DNS automatic initially unless your ISP requires a specific configuration. Use the ISP's documented MTU and VLAN requirements; avoid changing these merely to copy another provider's tutorial.
  6. Use the correct provider example. Aussie Broadband currently documents DHCP/IPoE without WAN VLAN tagging for the nbn configurations covered by its guide. Telstra also documents DHCP/IPoE with no WAN VLAN tag. TPG documents PPPoE, with tagging dependent on whether the service is a BYO/unbundled service or a bundled nbn and phone service. Those are examples, not a universal Australian preset. [1] [3] [4]
  7. Apply and inspect. Wait for the WAN to negotiate. Check its physical link, connection state, assigned address, default route and DNS. For PPPoE, distinguish authentication failure from missing physical link. For DHCP, confirm that the gateway is requesting a lease on the connected WAN.
  8. Test through the gateway. Connect a wired computer to a UniFi LAN port. Confirm its lease, browse several sites and test name resolution. Run a speed test after the connection is stable and compare it with the service's expected performance, allowing for the test computer and link speeds.

Diagnose common failures

Symptom Next check
No Ethernet link Correct WAN port, cable, power and active nbn service port
DSL modem has no line synchronisation Telephone lead, VDSL compatibility and ISP line status
PPPoE authentication fails Exact service credentials, account activation and required tagging
WAN address exists but names fail DNS configuration and a hostname lookup from the computer
UniFi WAN address belongs to the old router's LAN Existing router is still routing; decide whether that temporary double-router layout is intentional

A non-public WAN address does not, by itself, prove that the service is broken. Ask your ISP about its address allocation and carrier-grade NAT if you later need inbound services. Record the observed address privately rather than publishing it in a tutorial screenshot.

Verification and recovery

Check internet access after one controlled gateway restart and confirm that a fresh LAN client receives a lease. Test any telephone service that was previously provided by the old router. Save the working configuration and ISP settings securely.

If the new setup cannot be completed, restore the original cabling and router configuration. Follow the ISP's guidance if the old DHCP lease or PPPoE session must be cleared. Factory-resetting the nbn connection device is not a normal router-change step.

Sources

Back to the series

Leave a comment

Please note, comments need to be approved before they are published.