Unifi switch setup

[Simcfc73]

Evening all,

 

After a bit of advice as I've ripped out my old Netgear switches and put in some nice and quiet unifi ones.

 

I've got a aggregate switch and a mix of 48 port poe ones and standard 24 port ones.

I have looked at stp and wondered how others have set this up with redundancy. Have you changed the priority of the switches?

Not sure if I want loads of disabled ports for redundancy or just link everything back to the aggregate switch.

 

The UI is really good though, very impressed... Especially now I have a l3 switch.

 

(I know alot don't like them,.but my role has diversified and I love the simplicity)

[MrEprise]

(I know alot don't like them,.but my role has diversified and I love the simplicity)

 

Likewise. I really like them but I've encountered a number of people who like to tell me in no uncertain terms, how they really don't like Ubiquiti gear and would strongly recommend other brands.

 

I even had a 2 guys in doing a pen test and one of them commented that despite how impressed they were regarding how up-to-date our switch gear was and that it was all locked away in cabinets, still had to squeeze in his displeasure of the UniFi switches and how terrible they are at doing VLANs. I beg to differ however and I find setting up VLANs on these switches so much easier than the competition.

 

Unfortunately, someone else set them up so I don't actually know what our spanning tree setup is on these. Think I might go look...

 

 

EDIT: Had a look and ours are set to RSTP with the default priority of 32768 set on all switches. I'd also be interested if anyone else has different.

 

EDIT 2: Nope, I tell a lie. We've 2 Aggregation switches, the first of which the priority is set to 8192 and the second is set to 12288.

Edited February 15, 2024 by MrEprise

[FN-GM]

What does the topology look like? Are these disabled links going back to the core or going between other switches?

 

One problem with Unifi is they don’t support stacking. So if you have multiple at the core they can’t be tested as one. You you have to use STP and have disabled links.

[Davit2005]

Adjusting priorities means you can do things like influence the link used, in the case of MSTP you can load balance traffic utilizing multiple regions without having stacking but still the luxury of redundancy should one link fail.

 

If Unifi does what the org needs then why go elsewhere. For our org they simply don't have the features we need.

Edited February 16, 2024 by Davit2005

[Tefters]

 

I love the stuff and even more, I love the speed and budget saving!

Yes it has its quirks but the price comparison and no ongoing licensing is just too good to pass up.

 

Edited February 16, 2024 by Tefters

[DrCheese]

So we use Unifi Wifi (70 points) & I've bought the odd desktop switch from them, but I've always been wary about using them to replace our edge switches (Secondary)

The lack of stacking is a pain & they don't have any roadmaps for support. Looking around other forums (Reddit/sysadmin) has people swearing off using them in this way & it really gives me pause.

[Primus]

We're quite big fans too!

[midweek]

I've got a couple of Unifi switches and am probably going to replace all our ancient Netgears soon.

Part of me thinks I should be investing in "real" enterprise kit, but most of me thinks Unifi will do what I need at a more palatable price.

[Simcfc73]

I've got a couple of Unifi switches and am probably going to replace all our ancient Netgears soon.

Part of me thinks I should be investing in "real" enterprise kit, but most of me thinks Unifi will do what I need at a more palatable price.

That's what I'm doing. I've been trying to flog the old Netgear stuff on Ebay. Got about 7 more to go (GSM7224R mostly)

 

Whenever I add a new Unifi switch it makes the topology map look prettier and easier to manage.

 

Haven't delved into routing yet as I only just got a USW-Pro-Aggregation to replace a M5300-28GF3

[Tefters]

So we use Unifi Wifi (70 points) & I've bought the odd desktop switch from them, but I've always been wary about using them to replace our edge switches (Secondary)

The lack of stacking is a pain & they don't have any roadmaps for support. Looking around other forums (Reddit/sysadmin) has people swearing off using them in this way & it really gives me pause.

Don't get me wrong, different strokes for different folks and all but if stacking is the only issue holding you back I would question how much time you are spending dealing with switches on a day to day basis. Mine is pretty much 30 mins a month if that after initial setup.

 

I have cabinets with 4 48 port switches in and have them all linked together with DAC's, set a few link priorities, STP set and then 2 of the switches have fibre links to the core.

Ok you could argue thats 2x 48 port switches down a 10GBit link but for desktops, phones and a few WiFi access point that's more then enough bandwidth and I've never seen the link maxed out.

 

If a link goes down I am pushing 4 switches down 1 fibre but that's short term til I chuck a replacement switch in which I have a spare or 2 in the cupboard as they are so cheap.

 

In terms of overall management, the web GUI is so simple it takes a few minutes to change configs anyways. I've used plenty of switch stacks in my day but having used Unifi I don't personally sit there going "man this is so much more work, I miss stacks". Hell, I do half the config on my mobile or iPad.

 

The only real thing I don't like is their router/gateway offerings and use Sonicwall for that.

Edited February 17, 2024 by Tefters

[scooby1000]

Do let us know how you get on with that replacement as the aggregation switches don't look to do anything other than allow the use of loads of SFP connections. The so called L3 capability of the Unifi ecosystem is terrible at best at the moment...

[Mr.Ben]

Completely agree on the L3 stuff. Unifi is rubbish for that.

 

We use lots across the Trust, and L3 routing is done at our on site firewalls, or at larger sites through a HP Aruba switch.

[Simcfc73]

I've replaced all my Netgear stuff now for Unifi... just moving cables around and doing some LAG links..

 

Very impressed so far. just wish my cabling was tidier.

[Tefters]

I've replaced all my Netgear stuff now for Unifi... just moving cables around and doing some LAG links..

 

Very impressed so far. just wish my cabling was tidier.

Tidy cabling is a sign of too much free time!

[FN-GM]

I've replaced all my Netgear stuff now for Unifi... just moving cables around and doing some LAG links..

 

Very impressed so far. just wish my cabling was tidier.

 

Any pictures of nice tidy cabinets? Also curious to know what model you selected!

[aac]

I have just replaced my Aruba 5406r-ZL2 core with a Netgear M4300 96X and am now looking at replacing my edge switches with Unifi kit. What models are you all buying currently out of interest?

[Aprice]

I have just replaced my Aruba 5406r-ZL2 core with a Netgear M4300 96X and am now looking at replacing my edge switches with Unifi kit. What models are you all buying currently out of interest?

Ouch, Can't say I would ever have considered pulling a 5406ZL2 for a Netgear.

 

Edge side we normally use Aruba 2930M models if we need stacking or 2930F if not required.

Edited May 23, 2024 by Aprice

[Davit2005]

Ouch, Can't say I would ever have considered pulling a 5406ZL2 with a Netgear.

 

Edge side we normally use Aruba 2930M models if we need stacking or 2930F if not required.

 

2930F can stack too although if you use 2 10GB ports for stacking that only gives you 2 spare 10GB per switch (some 2930F models don't have 10Gb ports) :-)

 

Bit of a minefield but it is getting that way with all switches now including Aruba with the combinations of PoE+, PoE++, 2.5Gb, 10Gb, etc.

Edited May 23, 2024 by Davit2005

[Aprice]

2930F can stack too although if you use 2 10GB ports for stacking that only gives you 2 spare 10GB per switch (some 2930F models don't have 10Gb ports) :-)

 

VSF stacking is handy to have, but we end up usually going for the M variant as the DFE standards call for 40GB interconnects for the stack.

[DrCheese]

2930F can stack too although if you use 2 10GB ports for stacking that only gives you 2 spare 10GB per switch (some 2930F models don't have 10Gb ports) :-)

 

Bit of a minefield but it is getting that way with all switches now including Aruba with the combinations of PoE+, PoE++, 2.5Gb, 10Gb, etc.

 

The DFE requirements list 40gb stacking now as required, which rules out a ton of decent devices. For the newer Aruba's you're pretty much stuck with the expensive CX6300 range.

[Chockster]

The DFE requirements have counted out a load of options that would otherwise be a great fit for many schools, especially considering current financial constraints. Edited May 23, 2024 by Chockster

[speakercon]

Lets not forget the DfE threw out their own 'standards' when they ran out of money towards the end of the CTC funding and started using Unifi. I take them with a table spoon of salt.

[synaesthesia]

The DFE requirements list 40gb stacking now as required, which rules out a ton of decent devices. For the newer Aruba's you're pretty much stuck with the expensive CX6300 range.

 

The 6200 are cheaper than the 2930F for edges for 10Gbit VSF and 6300's not a massive amount more for 56Gb stacking.

[Primus]

We treat the DfE specifications more as guidelines than actual rules...

 

Their specifications are way over the top for most situations, completely miss how context is important in devising a specification, don't serve as a baseline as they're so over the top and they disregard them themselves with their own projects eg Connect the Classroom.

 

We've a relatively new build school, it certainly doesn't have divergent fibre paths internally - I'd be interested if anyone had moved into a brand new build school recently where DfE have funded this.

[Primus]

Lets not forget the DfE threw out their own 'standards' when they ran out of money towards the end of the CTC funding and started using Unifi. I take them with a table spoon of salt.

 

They never followed them to begin with, they wouldn't fund divergent fibre paths as far as I'm aware.