homelab

Upgrading My Home Network: Moving from UDM Base + BeaconHD to OPNsense + UniFi U6 APs

10/24/2024

Why I made the change

For several years my home network ran on a UniFi Dream Machine (UDM) Base with a couple of UniFi BeaconHD units for mesh coverage. I wanted to manage my own network and have more than one Wi-Fi network, which knocked most consumer routers out of the running and left me looking at prosumer gear from Ubiquiti or TP-Link. After some reading I settled on the UDM Base and BeaconHD, about four years ago.

It worked well at first. Then the device count kept climbing past 100 IoT devices, plus streaming clients, PCs, and phones, and the limits got hard to ignore. Congestion, coverage that wasn’t consistent from room to room, and not much control over any of it.

The other thing pushing me to upgrade was Wi-Fi 6. The UDM Base doesn’t support it, and more of my devices do. I wanted a network that could handle higher speeds and more simultaneous connections. Wi-Fi 6 also promises better coverage and performance and less battery drain for devices on 2.4 GHz and 5 GHz, which mattered to me. So I moved to OPNsense for routing and firewall, with UniFi U6 access points for Wi-Fi.

The old setup: UDM Base and BeaconHD

The UDM Base with BeaconHD mesh extenders gave decent Wi-Fi coverage across my three-level, 3000-square-foot house. The Beacons killed the dead spots. But as the network grew, especially with over 100 IoT devices sitting on 2.4 GHz, the setup started to strain.

The missing Wi-Fi 6 support turned into a bottleneck too, with Wi-Fi 6 devices multiplying around the house. I noticed it most when several devices wanted high bandwidth at once, streaming 4K or gaming.

Why OPNsense

I looked at a few options and went with OPNsense as the next firewall and router. It’s open source, and it gives me far more granular control than the UDM did, from VLAN segmentation to firewall rules. It suits someone who likes tinkering and tuning a network for performance.

Virtualized: OPNsense and UniFi Network Server on Proxmox

To make better use of the hardware I already had, I virtualized both OPNsense and UniFi Network Server on Proxmox. The Proxmox box is an N5105-based NUC with 16GB of RAM and 4 network ports (Intel, not Realtek). The network server gets a dedicated port, and OPNsense’s LAN and WAN get their own ports, so each service has its own connection.

Here’s what that buys me:

  • Everything is lightweight enough to run smoothly on the NUC, even with multiple VLANs and a lot of connected devices.
  • Snapshots and backups of the VMs are easy on Proxmox, which is a nice safety net when I break something.
  • I can move CPU, RAM, and storage around between OPNsense and UniFi as the network demands it.
  • The dedicated ports keep traffic isolated and give each service the bandwidth it needs.

All of that let me consolidate my network services onto one box and still reconfigure whatever I want without buying anything new.

The new setup: UniFi U6 APs

For Wi-Fi I went with UniFi U6 access points, both for coverage and performance and to finally get Wi-Fi 6 on the network. They push more bandwidth and keep up with modern devices doing 4K streaming, gaming, and IoT traffic at the same time.

Wi-Fi 6 brought a few things I actually noticed:

  • Better coverage and signal strength on both 2.4 GHz and 5 GHz.
  • Better performance in a dense house where a lot of devices are connected at once.
  • Longer battery life on Wi-Fi 6 devices, phones, tablets, and IoT gear included.

I put a U6 AP on each main floor and wired them all back with Ethernet for stability and speed. That got rid of the performance ceiling I kept hitting with the mesh setup, and Wi-Fi is now steady on every level of the house.

VLANs and segmentation

The main reason I switched to OPNsense was how I handle traffic inside the network. I set up VLANs to split device types apart, for security and for performance:

  • VLAN 10: Trusted devices like PCs, phones, and laptops.
  • VLAN 20: Home IT infrastructure (e.g., access points, switches).
  • VLAN 30: Streaming devices, such as smart TVs and speakers.
  • VLAN 48: IoT devices like smart lights, sensors, and cameras.
  • VLAN 99: Guest network for visitors.

Splitting things up this way makes bandwidth easier to manage and puts a wall between device groups. Each VLAN gets its own firewall rules, which is the part the UDM couldn’t really do.

Running the APs and switches from UniFi Network Server

I installed UniFi Network Server on the Proxmox machine to manage the U6 APs and my switches. It’s a single place to watch, configure, and update every UniFi device on the network:

  • See how connected devices are doing.
  • Change Wi-Fi settings like channels and power output.
  • Push firmware updates to all UniFi devices from one dashboard.

It’s made day-to-day upkeep easy, and I can check on things remotely when I need to.

Mesh versus wired backhaul

Before, the BeaconHD units did the mesh work. That extends coverage fine, but it costs bandwidth and adds latency, especially with a lot of devices.

The U6 APs with wired Ethernet backhaul fixed that. Every AP gets the full network bandwidth instead of leaning on a wireless hop between extenders. Wi-Fi stays fast and stable with plenty of devices connected.

What improved

The upgrades have been worth it. The network is faster, more responsive, and much steadier than the old one. The changes I notice most:

  • Modern devices finally get Wi-Fi 6: faster speeds, better coverage, longer battery life.
  • No dead zones, and speeds hold up across the whole house.
  • 4K streaming, gaming, and IoT automation are smoother.
  • With 100+ IoT devices and several users, congestion is handled far better than before.

Things I’d do differently

Moving from the UDM to OPNsense wasn’t all smooth, but the benefits outweigh the rough patches. What I learned:

  1. Plan your VLANs first. Nail down the VLAN structure before you start building it. Managing devices across subnets is much easier afterward.
  2. Use wired backhaul if you can. Ethernet to your access points makes a real difference.
  3. Snapshot and back up regularly. If you’re virtualizing, keep regular VM snapshots and backups around so a mistake doesn’t cost you a weekend.

Final thoughts

Going from a UDM Base and BeaconHD mesh to OPNsense with UniFi U6 APs changed how my home network works. I have full control now, better performance, and room to grow as the device count keeps climbing.

If your all-in-one router is struggling to keep up, OPNsense is worth a look, especially if you like having control and being able to customize things. Pair it with UniFi APs and you get a Wi-Fi network that stays reliable and scales as your household asks more of it.

Comments

Loading comments…

© 2026 Kunaal Mahanti · Built with Astro