Unifi Switch and VLANs

[fiza]

Just bought a Unifi US-24-250W switch and I am trying to configure it as an edge switch. Got the controller up and running and I have added in our VLANS. Where in the controller would I add in an IP Helper address for each VLAN please?

[caffrey]

DHCP Relay is under Services - DHCP - DHCP Relay, just create your network with DHCP relay checked on it

[IrritableTech]

Your IPhelper should be set at the core normally rather than the edge. We only use a few US-8-60s but we have setup VLANs rather than Corporate networks. The DHCP helper is done by the core - which is a HP switch.

[fiza]

DHCP Relay is under Services - DHCP - DHCP Relay, just create your network with DHCP relay checked on it

When I go to DHCP Relay under Services I see "UniFi Security Gateway Required. Please connect and adopt a UniFi Security Gateway to enable DHCP relay configuration". Is this something else I need?

[fiza]

Your IPhelper should be set at the core normally rather than the edge. We only use a few US-8-60s but we have setup VLANs rather than Corporate networks. The DHCP helper is done by the core - which is a HP switch.

Yes you are right. I have set it on the Core.

 

On the Unifi Switch I set VLANs too rather than Corporate. When I plug in a known working AP (Ruckus) it picks up an IP on the untagged VLAN but will not allow my phone to connect through to the BYOD VLAN. I know the AP works because if I plug it back into one of my existing edge switches my phone will pick up an IP on the correct VLAN.

 

in the Networks section I have added in all our existing VLANs as "VLAN Only" networks. I have changed the IP addressing of the pre-existing "LAN" network so it reflects our Native VLAN.

 

In profiles>Switch Ports I have created a profile called BYOD which has the Native VLAN as "LAN" and has all the other VLANS as Tagged.

 

On the switch I have attached the BYOD profile to ports 1-12

 

Does that all sound right?

[Davit2005]

Don't need the USG unless you want an all in package. Where is your IntervLAN routing happening at Firewall, core switch or mixture of both?

 

I had a US-8-150 at home and simply tagged the traffic on the uplink to the next switch or core switch.

 

From memory I went to Settings and created a VLAN only network.

[caffrey]

Sorry my bad, we have a USG Pro

 

For wifi we use the BYOD service on Smoothwall using Smoothwall DHCP server etc. Unifi just points to the Smoothwall IP with a radius profile. The wifi VLANS on unifi are set as VLAN only for us.

[fiza]

Don't need the USG unless you want an all in package. Where is your IntervLAN routing happening at Firewall, core switch or mixture of both?

 

I had a US-8-150 at home and simply tagged the traffic on the uplink to the next switch or core switch.

 

From memory I went to Settings and created a VLAN only network.

Intervlan Routing is done on our Core switch.

[fiza]

Sorted now. My own stupidity, i forgot to tag the uplink port on the BYOD VLAN because I was setting up the switch in my office.

[ITManLT]

Hi Fiza,

 

Did you have any trouble adopting the switch to the controller?

I'm setting up a small scale test network and we have a US-48, a US-48-500, 2 AP-AC-PRO and 1 cloud key for the controller.

 

When I plug the 48 port POE switch in, and the cloud key into that, I can get into the fallback IP for the controller (192.168.1.30) and configure it, but I change the IP to something on our management IP range (lets say 10.20.30.10).

When logged in after the setup wizard, I can see the 48-500 switch pending adoption on a default IP 192.168.1.20 but as the controller IP is now on a different subnet it will not adopt.

 

If I adopt the switch before changing the controller's IP so they both have a 192.168.1.x address then the switch adopts fine. I then try changing the switch IP address to 10.20.30.11, change the controller to 10.20.30.10 again and although they are both on the same subnet now, the controller loses connection to the switch...

 

Did you have any trouble like this?

 

Thanks,

L

[fiza]

I'm sorry I didn't have any issues like that.

[RichardZh]

Maybe you can refer to this video: Edge Switch Configuration - VLANs, VLAN Routing, Routing - Part 1 - EdgeSwitch Configuration

[localzuk]

@RichardZh - That is for the Edge switch range, not the Unifi range.

@taylor - Ah, I can see why you're having issues - you're trying to configure a controller via the very switch you then wish to adopt. Its a chicken and egg situation.

 

One way you can do this is during setup, leave the switch configured on the same VLAN as the controller, adopt the switch and then enable SSH management under the settings section -> Site -> Device Activation. Make a note of the username and password.

 

Now, change the IP on the controller and the switch will disconnect from it.

 

The next step is to SSH into the switch using the details above. Once connected, enter the command "set-inform http://IPOFCONTROLLER:8080/inform" and press enter, then type "reboot" and press enter.

 

The switch should reboot, and reconnect to the controller for you.

 

There is probably a better way but this way should work!

[Davit2005]

Here is another video about Unifi, setting up the Switch, APs ans even a Cisco phone. But does not include the Routing as that is done on a layer 3 switch.

 

https://www.youtube.com/watch?v=zHwm-6VkBGs&t=88s