...there are WAY too many settings to make it feasible to go over, a lot are tailored to my exact network setup as well.
No problem, I'll figure it out. Curious though, doesn't the HT2000 have a firewall built into it? Are you using FreeBSD because it offers more flexibilty and customization.....or is there something else I'm missing? Basically what I'm asking is in the set-up I described above with 3 access points, is it advisable to install a seperate firewall/router after the HT2000 or can one typically rely on the HT2000 to do this?
You can rely on just the HT2000w if you wanted to, it does have a firewall built in.
I am using PFSense mostly for DNSBL, and Content Filtering on my network.
Remote features wont be possible unless accessed via IPv6... As you said, these HT2000w units can't be put into a bridged mode, so chances are the UniFi Cloud Key will be useless for remote administration after you add on the fact you are behind CGN...
@C0RR0SIVE. I just had this bright idea, and perhaps it's beyond the scope of this forum, but thought I'd ask anyway. With the goal of having the access points controlled and configured such that we can have more robust control over guest accounts (to limit speed, etc), what if instead of a Unifi USG/CLoad Key arrangement I originally described (which would require IPv6 enablement/bridge mode), we use an always-on PC running Unifi Controller software connected locally to the Unifi switch? While there would be no remote control of the network (thus no IPv6 complications), I'm thinking all the other features of the Contrioller could be enabled (Unifi AP guest wifi speed control, data limits, etc). What you think? Am I missing something in the way HT2000w would behave in this set-up?
HT2000w > Unifi switch > local PC running Unifi Controller
> Unifi access points