strawberry Posted January 20, 2012 Posted January 20, 2012 Has anyone setup Vlans on their unifi wireless? I've followed all sorts of guides and got no where. Tried on HP and Cisco, Has anyone managed to set this up?
Achandler Posted January 20, 2012 Posted January 20, 2012 We have two SSIDs on our Unifi points, one on the Default VLAN and a second on VLAN (example). The setup on the points/ controller should be as simple as that. You then need to make sure your setup the VLANs on the switches correctly, we use Netgear and D-Link switches here and 1 HP switch (old one) and it all works fine. I guess your ports on your switches are the problem. Ona Netgear switch they are Tagged on in you second VLAN and then untagged on the Default VLAN. 1
strawberry Posted January 20, 2012 Author Posted January 20, 2012 yup, Thats pretty much what i've been trying. Could you sanity check some things for me? Assuming I have a data vlan which should be default and an admin vlan 1. Controller doesn't need to be on all vlans, just the data vlan 2. Does the port need to be trunked or just access with the admin vlan tagged and data untagged?
ShorehamGeek Posted January 20, 2012 Posted January 20, 2012 I've got this going with 3 VLANs on HP procurve kit. What version of Unifi Server are you running?
Achandler Posted January 20, 2012 Posted January 20, 2012 I did a a pretty diagram for itgeek yesterday that I can email later if needed, I might need to tweak it slightly. Basically your APs need to to be on switch ports that are untagged on the Default VLAN and Tagged on the second VLAN. All your uplinks need also ofcourse need to be untagged on default and tagged on the second VLAN. Your controller just need to be on the default VLAN, and the traffic on the second VLAN does ofcourse need an outlet, maybe a server providing DNS and DHCP (personally we use our Smoothwall box).
strawberry Posted January 20, 2012 Author Posted January 20, 2012 I did a a pretty diagram for itgeek yesterday that I can email later if needed, I might need to tweak it slightly. Basically your APs need to to be on switch ports that are untagged on the Default VLAN and Tagged on the second VLAN. All your uplinks need also ofcourse need to be untagged on default and tagged on the second VLAN. Your controller just need to be on the default VLAN, and the traffic on the second VLAN does ofcourse need an outlet, maybe a server providing DNS and DHCP (personally we use our Smoothwall box). That would be great, thank you I think i may have found the issue, all of our vlans are tagged on the uplinks!
Achandler Posted January 20, 2012 Posted January 20, 2012 Im assuming your doing this on a test switch, as you don't want to break a in use uplink. Though this would be pot calling the kettle black as when I setup mine I used our library for trial an error! Shoreham has HP switchs with Unifi though, so he can probably elaborate on how his VLANs are setup on them, personally I have done it on Netgear and D-Link
ShorehamGeek Posted January 20, 2012 Posted January 20, 2012 Im assuming your doing this on a test switch, as you don't want to break a in use uplink. Though this would be pot calling the kettle black as when I setup mine I used our library for trial an error! Shoreham has HP switchs with Unifi though, so he can probably elaborate on how his VLANs are setup on them, personally I have done it on Netgear and D-Link Happy to if that would help?
strawberry Posted January 20, 2012 Author Posted January 20, 2012 Happy to if that would help? Would be a tremendous help!. I'm using the most recent version of the controller. Sat in our meeting room on our live switch with all of smt connected....
ShorehamGeek Posted January 20, 2012 Posted January 20, 2012 OK - Switches first. Switch that AP is plugged into you would have 2 VLANs configured. ID1 - Default - all ports untagged ID2 - Wireless - tagged on the port that the AP is plugged into and any port that is connected to the switch connected to the wireless default gateway. If there is another switch between the switch above, and the default gateway, that needs to have both VLANs setup, with the same ID numbers as the switch above, and the port that connects to the switch above needs to be tagged on VLAN ID 2. On your unifi controller, the default SSID does not have a tick in the VLAN box, but the other SSID must have a tick in the VLAN box and the ID number of the VLAN you're routing it over (which would have to be "2" in the example above).
ShorehamGeek Posted January 20, 2012 Posted January 20, 2012 OK - Switches first. Switch that AP is plugged into you would have 2 VLANs configured. ID1 - Default - all ports untagged ID2 - Wireless - tagged on the port that the AP is plugged into and any port that is connected to the switch connected to the wireless default gateway. If there is another switch between the switch above, and the default gateway, that needs to have both VLANs setup, with the same ID numbers as the switch above, and the port that connects to the switch above needs to be tagged on VLAN ID 2. On your unifi controller, the default SSID does not have a tick in the VLAN box, but the other SSID must have a tick in the VLAN box and the ID number of the VLAN you're routing it over (which would have to be "2" in the example above). Just a thought - the port of the switch that is plugged into the device being used as the Wireless default gateway, should be untagged on the Wireless VLAN (ID 2 in above example). 1
ShorehamGeek Posted January 20, 2012 Posted January 20, 2012 If the above has descended into gibberish PM me for a chat.
strawberry Posted January 20, 2012 Author Posted January 20, 2012 OK - Switches first. Switch that AP is plugged into you would have 2 VLANs configured. ID1 - Default - all ports untagged ID2 - Wireless - tagged on the port that the AP is plugged into and any port that is connected to the switch connected to the wireless default gateway. If there is another switch between the switch above, and the default gateway, that needs to have both VLANs setup, with the same ID numbers as the switch above, and the port that connects to the switch above needs to be tagged on VLAN ID 2. On your unifi controller, the default SSID does not have a tick in the VLAN box, but the other SSID must have a tick in the VLAN box and the ID number of the VLAN you're routing it over (which would have to be "2" in the example above). Cool, I'm not far off then, only difference I have between your setup and mine is that I have the uplinks between the switches tagged for ID1. Would that be enough to break it?
m25man Posted January 20, 2012 Posted January 20, 2012 Sorry chaps I've been out all day and missed this thread, sounds like you have got it sussed though. Untagged on the vlan that the controller lives on tagged on any other that you want to deliver over wifi. Thats generally the rule. BTW, how is everybody finding it? One of my schools has decided to dump the Extricom system after having 20 teachers logged into Sims on a single point at the same time... first time they have ever been able to do this never with the Extricom.
strawberry Posted January 21, 2012 Author Posted January 21, 2012 Thanks guys, The problem was the uplinks, If i put the AP on the same switch as the router then all is well. Now just to figure out why all the uplinks are tagged when they seemingly shouldn't be!!.
m25man Posted January 21, 2012 Posted January 21, 2012 All uplinks between switches need to be tagged with all vlans that need to be seen across campus.
pd5149 Posted January 21, 2012 Posted January 21, 2012 OK - Switches first. Switch that AP is plugged into you would have 2 VLANs configured. ID1 - Default - all ports untagged ID2 - Wireless - tagged on the port that the AP is plugged into and any port that is connected to the switch connected to the wireless default gateway. If there is another switch between the switch above, and the default gateway, that needs to have both VLANs setup, with the same ID numbers as the switch above, and the port that connects to the switch above needs to be tagged on VLAN ID 2. On your unifi controller, the default SSID does not have a tick in the VLAN box, but the other SSID must have a tick in the VLAN box and the ID number of the VLAN you're routing it over (which would have to be "2" in the example above). How would you configure a Cisco Switch for this? What would the port settings be?
pd5149 Posted January 22, 2012 Posted January 22, 2012 Do you have an example of a cisco config for the vlan setup? Ideally I would want 2 SSID's. mywif and mywifi-guest. I want mywifi on "corportate vlan" and mywifi-guest on a guest vlan that only has access to the internet and no other resources. Anythoughts on where the managment server should be configured in? I'm assuming the corportate vlan and to add to the mix the people on the mywifi will use Radius authentication. Thanks
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now