Unifi switch profiles - tagged/untagged?

[localzuk]

So I am rolling out our new Unifi switches this week and have a question regarding tagged/untagged VLANs.

 

Our central switch here is an HPE Procurve 5406R, and on the uplink port to my first Unifi switch, I have all our VLANs tagged, except for the access VLAN 1000 (called Cent Servers).

 

On the unifi switch, I have the following profile:

 

 

The new switch appeared when plugged in, with an IP in the correct subnet. I adopted it and then applied this profile to the uplink port. Once it finished provisioning it became disconnected - so something is not right.

 

What am I doing wrong? The native network is supposed to be "untagged" is it not? Or is it trying to use the default vlan 1 somehow?

[ITGuyWestMidlands]

Does the port on the procurve have vlan 1000 untagged?

[localzuk]

Yes, vlan 1000 is untagged on the uplink port to this switch on the HPE switch.

[ITGuyWestMidlands]

Oh and don't forget to set the management vlan on the unifi switch to vlan 1000 also

[PotNoodleTech]

You say "I have all our VLANs tagged, except for the access VLAN 1000 (called Cent Servers)." you don't mention if you have the access VLAN 1000 untagged on the uplink port of the 5406R?

 

If you only have VLAN 1000 tagged on the HP switch, yet you have it as Untagged (Native) on the unifi then it will disconnect when the above profile applies. Either Tag VLAN 1000 on your unifi settings, or have the HP port Untagged to VLAN1000 and then tagged with all the others.

[localzuk]

Oh and don't forget to set the management vlan on the unifi switch to vlan 1000 also

Ah! I didn't realise this was set separately - had assumed the profile would do this. Changed it and resetting the switch now, so we'll see!

[ITGuyWestMidlands]

I think the idea is that the management vlan can be a tagged vlan if desired (arguably more secure)

[localzuk]

Yup, that's got it. Thanks

[ITGuyWestMidlands]

Excellent. The Unifi gear is awesome for the price. 2 x SPF+ on the 48G switches is amazing. Hope it goes well for you - I'm sure it will.

[localzuk]

Excellent. The Unifi gear is awesome for the price. 2 x SPF+ on the 48G switches is amazing. Hope it goes well for you - I'm sure it will.

Indeed. Rolling out 22 switches across 3 schools. Replacing old HPE gear. We simply wouldn't've been able to afford to do it if we'd stuck with HPE.