Cisco to Unifi - Switch Migration

[BKGarry]

Hello All,

 

After hitting some snags, I am going to have to look at my future planning of deploying my unifi switches.

 

I thought all the Unifi Switches supported VLANs, so I got a new switch and started creating "Corporate" networks, didn't like that, so then I just tagged the VLANs (with no DHCP restrictions or anything) and it worked.

 

I am currently looking (for the summer holidays) at removing our core Catalyst 3750G (two stacked in fact) and the rest of the Catalyst 2960/2960Gs.

 

At the moment if I just have these VLANs tagged, I would have to keep the core switch in.

 

Has anyone deployed all Unifi kit with VLANs, and if so, do you need the USG to make it work, as I didn't want to complicate things between our switches and the L3 switch (Router) from our LA's Broadband service.

 

If you have done VLANs without USG, how did you do it?

[Primus]

I may be wrong but my understanding is that to do inter-vLAN routing you require the USG if you're going full stack Unifi.

[BKGarry]

Thank you @Primus That's what I am thinking too. The switches themselves do not do it.

 

Looks like it is going to be a little bit more fun that I thought.

 

At the moment, I have a funny one, where the only Unifi switch I have (in a small pavilion on our field) currently has 3 clients connected to it via an AP and one VOIP phone is listing 180+ clients. Must just be receiving all the broadcasts through the current Cisco vlans

[Primus]

Yes we have Unifi in an offsite provision and it can see clients back on our main school network - it's quite useful on occasion!

 

I should say this is by design as it's an extension of our site so has the exact same vLANs etc.

[BKGarry]

ARGH!!!!!!

 

So I am planning and remembered that our Router for our LA internet connection doesn't give an WAN IP Address, it is our DHCP server that serves all IP addresses as there are central web filtering servers which use those IP address and this is what passes through.

 

I will have to keep our current core switch to do the VLANs and internet connection to their router, as I do not think it is possible to use the USG properly with what we have as our current service

 

Maybe an Edge Switch from Unifi in the middle would solve these issues :-)

Edited January 22, 2018 by BKGarry

[hallb15]

I think the gateway pro will probably do what you want - it shares many of the Edge switch features as it uses the same Edge OS. It seems like an edge product with the unifi front end bolted on so as long as you don't mind playing around with .json files you can probably get it to do what you need. Check the forums, there's loads of good stuff on there albeit a little hard to find sometimes. https://community.ubnt.com/

[BKGarry]

I have posted in their forums. I think the gateway pro is setup to work like a router, and doesn't pass through the IPs, but I think an Edgeswitch will do what I want.

 

I was going to have the US-16-XG in the middle for the server hosts and the switches to go back to, if I have it right I can use the ES-16-XG and get a SFP+ to Ethernet adapter to put the WAN uplink/internet port into and it should do all of it. And to top it off the EdgeSwitch version seems cheaper

[hallb15]

That sounds like a sensible plan. I was looking at the US-16-XG when I was looking into 10Gb but its a bit overkill for us at the moment. There's only about £14 difference in price at my usual supplier, 4Gon Ubiquiti EdgeSwitch 16 XG - ES-16-XG

[fsbilby]

I think an Edgeswitch will do what I want.

 

Yeah, you can try Edgeswitch.

[Davit2005]

If you have the 3750G in a stack doing the IntervLAN routing that should work. I have a Unifi US-8-150w at home with a virtual firewall doing the IntervLAN routing and about 10 vlans. DHCP is dealt with by a 2012 R2 Server. I actually have 2 3750G's at home and still contemplating a FAN mod t make them quieter.

 

You don't need a USG for IntervLAN routing. The 3750G in a stack would give you better options for resiliency compared to anything that UniFi currently offer as far as I am aware.

 

The Edge switch ES-16-XG does look like doing routing but there is no option to stack or no VRRP . Not sure about the US-16-XG, out of the 2 I'd go for the Edge switch.

Edited February 5, 2018 by Davit2005

[chazzy2501]

I have the us-16-xg I'm not aware of any inter vlan routing on any unify switch? I was under the impression that you had to get the USG-PRO (which I have but cannot use as it HAS to be the default gateway) which is a router on a stick

[BKGarry]

I have the us-16-xg I'm not aware of any inter vlan routing on any unify switch? I was under the impression that you had to get the USG-PRO (which I have but cannot use as it HAS to be the default gateway) which is a router on a stick

 

I got confirmation back from Ubiquiti that I should be able to do what is needed with the EdgeSwitch version. ES-16-XG

 

I am going to have the US-16-XG centrally for my servers and the other switches to go into (so I can view traffic stats through the console) then I am going to have an SPF+ lead to the EdgeSwitch and then from there into our ISPs "Router"

[fiberoptics]

The USG acts as the VLAN and subnet router and as you create networks they are provisioned onto the gateway and then made available to the switches for VLAN tagging.

[Davit2005]

ARGH!!!!!!

 

So I am planning and remembered that our Router for our LA internet connection doesn't give an WAN IP Address, it is our DHCP server that serves all IP addresses as there are central web filtering servers which use those IP address and this is what passes through.

 

I will have to keep our current core switch to do the VLANs and internet connection to their router, as I do not think it is possible to use the USG properly with what we have as our current service

 

Maybe an Edge Switch from Unifi in the middle would solve these issues :-)

 

I know this is a bit old.

 

In my view you are taking a large step back from Cisco C3750G stacked at the core to Unifi at the core redundancy wise.

 

The 2 x C3750G give true stacking and high speed IntervLAN routing. With Unifi the best you could do is get 2 USG's and set them up with VRRP so at least the gateway of the subnets would be resilient. Unifi Switches do not offer true Stacking or VRRP yet and the USGs do not offer HA.

 

I have a US-8-150W at home but personally would only use the Ubiquiti Edge switches in a prod environment. I've even started replacing the Unify with a HP 2530 8 port PoE+ which actually cost the same but offers full CLI Out of band Manageability. The HP works with the Unifi Access Points no problem.

Edited March 19, 2018 by Davit2005

[BKGarry]

sorry to necrothread this one again.

@Davit2005

 

the C3750G at the moment as one lot of SFP ports and the member is 24 1gbps ethernet sockets.

 

I am upgrading all other links to 10gbps, if I keep this current core switch, it will not have failover, but it should be OK for data routing right without really affecting the 10Gbps performance elsewhere.

 

So servers are on VLAN 100 but clients on VLANs 303, 302 and 500 (making up some numbers) when a client communicates to the server or to the web, it only uses this part to establish where to go VLAN wise but the data is still handled by the switches?

[fiberoptics]

You need a vlan-capable network environment (router and switches, or even an Edgerouter X, which has a vlan-aware switch chip) the APs alone are only the last network devices before the clients.