I’m trying to create a simple trunk to pass VLANs between my new CCR1009-8G-1S-1S+ and a 48-port Ubiquiti EdgeSwitch and I’m having a really hard time. I’ve read that you can do the VLAN tagging with the switch ports on the CCR but that is just confusing me further and I can’t even get it working the old fashioned way that’s always worked for me.
CCR:
vlan8 on interface ether5 - vlan8 interface added to bridge8
bridge8 has ip and dhcp server: 192.168.8.0/24
EdgeSwitch:
Default is VLAN1 for management.
Create VLAN8
On Port Configuration page, include VLAN 8 TAGGED on port 0/1
On Port Summary page, set PVID of 8 on port 0/2
This SHOULD give me a trunk port from port 0/1 of the EdgeSwitch to ether5 on the Mikrotik and EdgeSwitch port 0/2 as an access port untagged direct to VLAN8, but when I plug in a laptop to port 0/2 I do not get an IP from the DHCP on the Mikrotik. Has anyone had success trunking between Mikrotik and Ubiquiti?
Yes in fact I created a step by step guide for this specific hardware pairing… email me at mike(at)43index.com and I will forward you the Word document. I had no problems getting it setup and working just as you are describing. You don’t need to tag the VLAN on the Mikrotik end, only on the Edgeswitch.
You mentioned setting the trunk port however you don’t mention any VLAN IDs for the other ports on your switch that you are trying to pull an address from. Remember the trunk port is just a port to carry your VLANs between the switch and the router. You do not plug in your client devices into the trunk port…
Edit: Sorry I re-read your post and see where you describe port #2. Yes if you untag port 2 and put in the appropriate PVID then you should pull an address from the VLAN pool.
I am in same situation with an edge switch - how did you get this working - cant figure out how to create a trunk port. All the VLans are setup in the CCR. I am using UAPs to tag via SSID.
And with good reason…CRS devices have switch chips, but CCR devices do not. On a CCR, every interface is discrete and handled directly by the SoC.
I’m afraid I have no experience with EdgeSwitch, but the configuration you propose for the CCR looks fine. The only thing I would say is that on switches that I have had experience with that employ the “PVID” concept, setting the PVID on a port that you want to untag a given VLAN on is typically not enough…PVID takes care of ingress (making sure incoming untagged packets on that port get tagged internally with the appropriate VLAN ID before getting forwarded elsewhere), but you also still need to make that port a member of the VLAN so that the switch knows to forward packets from that VLAN to that port for egress, and configure it to untag packets headed for that port from that VLAN. So the problem on the EdgeSwitch config might not be with the trunk port itself, but with the access port.
So - I very much appreciate your efforts - but cannot get his to take… Any feedback would be appreciated, I am probably missing something simple. This management vlan is confusing to me.
Here is my 192.168.x.x setup on my CCR1016
.10 network - VLAN 10
.20 network - VLAN 20
.30 network - VLAN 30
.40 network - VLAN 40
.50 network - this is my hardware network with the EdgeSwitch and Unifi Server in it. (ether5)
the .10 - .40 VLANs are tied to the separate SSIDs on the UAP Pro.
my trunk port = 48
my AP Pro port =15
Unifi Server port = 1
<<<< Your instructions with questions… By access ports below - do you mean access point ports ?
On the Ubiquiti EdgeSwitch
Create VLANs that you wish to pass from your Mikrotik - I did this on the status page = 10,20,30,40
On Port Configuration page, include VLANs TAGGED on your trunk port(s) = 0/48 10,20,30,40 INCLUDED AND TAGGED
On Port Configuration page, include VLANs untagged for your access ports (as per Nathans suggestion) = 0/15 10,20,30,40 INCLUDED AND UNTAGGED
On Port Summary page, set PVID to the same VLAN you included untagged for your access ports in the last step = ??? 0/15 PVID 10?? there is not way to put more than one PVID on there.
On your VLAN ports… not only are you setting the specific VLAN number to untagged are you also EXCLUDING all other VLANs etc off of that access port? Access port is simply the switch port that connects to an end client (ie desktop, laptop, access point, printer etc.)
not really … if my VLANs are 10,20,30,40 - are you saying the pvid needs to be the same? pvid 10,20,30,40?
On the Ubiquiti EdgeSwitch
Create VLANs that you wish to pass from your Mikrotik - I did this on the status page = 10,20,30,40
On Port Configuration page, include VLANs TAGGED on your trunk port(s) = 0/48 10,20,30,40 INCLUDED AND TAGGED
On Port Configuration page, include VLANs untagged for your access ports (as per Nathans suggestion) = 0/15 10,20,30,40 INCLUDED AND UNTAGGED
On Port Summary page, set PVID to the same VLAN you included untagged for your access ports in the last step = ??? 0/15 PVID 10?? there is not way to put more than one PVID on there.
this is what I am thinking the procedure is - it is step 4 that I don’t understand. I cannot see a way to add more than one pvid - if that is what I am supposed to do.
Okay you can not have an access port with more than one VLAN. Only your trunk ports are passing multiple VLANS between switches and routers. Your access port is your “final destination” for a specific VLAN but you can only run one untagged VLAN per access port. What is the problem or error that you are still getting with the config that has been lined out?
I have followed the instructions exactly - and no necessarily getting an error. I just cannot get an IP address from the router to the wireless client.
Here is my setup - perhaps more clear.
On the CCR1016 I have 4 VLANs setup with DHCP servers, addresses, bridges, etc… to interface ether5. I have used this several times in the past with success. This is the same setup as described in the first post for his vlans. If I plug a single UAP into this port and connect the to the 4 VLAN’d SSIDs - the wireless client will get a dhcp address from the correct subnet. So, this is working the way I would expected it to.
Now enter the EdgeSwtich.
On the VLAN status page I created 10,20,30,40
On the port configuration page for trunk port 0/48 VLAN INCLUDED and TAGGED 10,20,30,40 - VLAN 1 is included by default
On the port configuration page for the access “end port” 0/15 INCLUDE and UNTAGGED 10,20,30,40 - VLAN 1 is still included, tagged and included by default
I have made not changes on the port summary page - it is still default PVID 1
It is step 4 that does not make sense to me. ALL my VLANs still need to pass from the trunk port to the access port as the UAP is doing the tagging by SSID. I do not need the access port to do any tagging, but I get it needs to be member of the VLAN to pass the tag. I have also tried turning 0/15 into a trunk port, but that did not work either.
Thanks for helping - this making me crazy. We have used Planet and Cisco POE switches with no issues, I took a chance with the EdgeSwitch and am paying the price for my ignorance. It just seemed like a perfect fit with this project and the number of APs going in.
I was also hoping blougaville would chime in again as he has it working - I just wonder what he is doing that I am not…
AHHHH! If you are connecting Unifi Access Points with VLANs those must be TAGGED!!! Switch all your UAPs to TAGGED and you should be in business!
So to clarify… Your trunk ports sound great. Also any access ports should be UNTAGGED but your UNIFI ports need to be TAGGED. Leave the PVID alone on the UNIFI ports. So in a way you it is almost like setting up additional trunk lines on your Unifi ports. Let me know what you find out.
I think RackKing’s confusion here is a simple matter of terminology and definitions. By convention, any port that has multiple VLANs tagged on it is called a “trunk port”. An “access port” is a port that is only on a SINGLE VLAN which is UNTAGGED, and an “access port” typically has a single end-user device (computer, etc.) plugged into it, not another piece of infrastructure. So by those definitions, in the configuration that RackKing is proposing, where there is a MikroTik router, a UniFi AP, and a switch in between those two devices, there are no access ports and you don’t want to untag anything. You are in fact “trunking” multiple VLANs through the switch between two pieces of network infrastructure: the router and the AP. Technically, the AP itself, and not the switch, is the device providing (wireless) “access ports” in the form of the various SSIDs that each VLAN that you are trunking to the AP is getting untagged on.
Exactly!! Thanks Nathan for explaining more gracefully than I was. Great way to present it that the Unifi’s are another trunk line and the wifi is essentially the access port. Hope Racking can get it lined out from here.
@ Nathan you have descried what I am trying to achieve perfectly - but it simply does not work for me.
0/48 uplink trunk has VLANs 10,20,30,40 included and tagged and Default VLAN 1 included and untagged. This should mean the hardware on this is into the network of 192.168.50.x on either 5.
0/15 AP trunk port has VLANs 10,20,30,40 included and tagged and Default VLAN 1 included and untagged.
The strange thing is the second I add the vlans to the status page without assigning anything to ports I loose communication with the switch. I am cooked at this point. It sounds easy… simple even.
That is very strange. I am testing your setup and I to am running into the same problem as you with the VLAN… very strange when connected to the Unifi AP. I have posted in Ubiquiti forum, will see if we get a response. I believe the setup is exactly how it should be, may be a software issue with Edgeswitch…