VLANs in UniFi - Setup & Configuration

No video

VLANs in UniFi - Setup & Configuration

Рет қаралды 116,667

Simple Networks

Күн бұрын

Пікірлер: 107

@adriandude85 3 жыл бұрын

Would be cool if you did a video covering routing between the VLAN. For example having lighting equipment on another VLAN and being able to control it from an iPad on a different VLAN

@marioroyes Жыл бұрын

If you found a video on how to do this would love it if you share

@adriandude85 Жыл бұрын

@@marioroyes turns out in UniFi, the Inter VLAN rules are automatically created and all VLANS can talk to each other. You have to then block traffic between them if you need to do that

@romanzabarov6886 5 ай бұрын

Very clean and methodical step by step institutional videos. Thank you

@gauravmehta2933 2 жыл бұрын

How to make iOT devices go through vlan if they are connected using an access point?

@Zedman3333 3 жыл бұрын

OMG that was the best explanation ever, some people like myself sometimes need stuff explained to me like im a 5 year old, its was perfect, subbed cheers.

@simple_networks 3 жыл бұрын

Glad I could help!

@Zedman3333 3 жыл бұрын

Thanks for the reply, @ 4:19 i get the error "DHCP Gateway is not contained in provided IP Subnet" , any ideas? thx

@simple_networks 3 жыл бұрын

Off the top my head I would say to make sure that you are starting your Gateway IP/ Subnet with x.x.x.1 instead of x.x.x.0. Also make sure that you aren't trying to assign the VLAN a DHCP server from a different VLAN. For example, if your VLAN is 192.168.2.x/24, make sure that your DHCP server is set as 192.168.2.1.

@thehomicid 3 ай бұрын

Thank you man. you saved me from pulling my hair after 3 days of set up

@RockPaperBFG 3 жыл бұрын

Thanks for making this! It was a bit confusing on how to get the tags I was looking for compared to how I was used to doing it. Also, it was very helpful to find out that I should use the corporate type vs vlan only since we are just using UniFi gear.

@simple_networks 3 жыл бұрын

Thanks for the feedback, Glad I could help!

@vboutique2188 9 ай бұрын

Can I have this setup? ONT to edgerouter to unifi poe to 2 unifi in wall aps, 2 unifi ceiling mount aps, and 2 mini poe powered unif switches, with vlan for home, vlan for smart home, and vlan for guest network? Would I need a separate vlan for home labs? Anything else I would need?

@shannonbreaux8442 Жыл бұрын

Hi I have a edge router X I am trying to use the basic wizard set up one LAN Internet connection on Vlan . How do I get the Internet just one one of my port with the Vlan?

@scruggs.jonathan 3 жыл бұрын

So say I'm using a different brand router/gateway other than Unifi, is there any benefits of still setting up the networks as corporate? Say like for inter-vlan routing? Vs vlan only. Thanks for the video!

@simple_networks 3 жыл бұрын

If you aren’t using a Unifi Router/Gateway then generally there’s no reason to use a Corporate network on the unifi side. The functionality of that should be made up by the networks and vlans set up on your router/gateway.

@scruggs.jonathan 3 жыл бұрын

@@simple_networks Gotcha, I was just curious because I noticed even when there's no unify gateway the pro switches can actually be a gateway when running in layer 3 mode. But you can't do that if it's vlan only mode.

@ahmadali-ik5nb Жыл бұрын

Thankyou for actually explaining tNice tutorialngs. Other videos that I watched started talking about how to make soft and didn't ntion anytNice tutorialng

@wwolfram33 2 жыл бұрын

When creating a Profile i understand selecting the Native Network for untagged traffic (access ports). Can you please explain why one would select tagged traffic as well ( @ 6:35 ) ? Mixing tagged and untagged traffic on a port is new to me. It this typically used in Unifi networks (not including IP phones)? If so, what is a common use?

@antoniorodrigues8495 2 жыл бұрын

Hi, I've setup a vlan. So far i've just created a Vlan for Wifi devices with a different subnet. I want these devices to access Printer in the Main Lan. Any suggestion ?

@PhatkatCollections 2 жыл бұрын

quick question. I have an asus router and two ubiquity APs. Can i set up a vlan like this for my smart devices or do I need an edge router?

@simple_networks 2 жыл бұрын

It really depends on whether or not your asus router supports VLANs. The VLANs would have to be setup on the asus router and be passed into the unifi system using the "VLAN Only" feature.

@kennywiles 10 ай бұрын

good video dude, didnt watch, was looking for horrible videos discussing how this is performed lol, and yours is well explained, only took 15 min to realize this video is far better than 90%

@islandsnow 3 жыл бұрын

Can you do a video using vlans and passing it on am uplink port up to another switch? You said some switches don’t support custom profiles. How do you know which switches does and don’t?

@simple_networks 3 жыл бұрын

I will certainly add that to my list of videos to make! As for knowing which switches support custom profiles, just Google search: does “unifi switch name” support custom profiles. The unifi community forums will have all of those answers.

@ewoks42 2 жыл бұрын

New to Unifi ecosystem, so this is still a bit confusing for me.. I have USG and AP no additional Unifi HW. Is it possible to have 2 WiFis mapped to 2 VLANs with the goal of having my IoT devices being isolated from my main network, but that just some devices from main vlan can access everything in iot vlan and not the other way around. Thanks

@sadailali 3 жыл бұрын

How switch ports should be configured for AP ports? Do Unify switches act like Cisco Lightweight APs which you configure the port as an access port(in management VLAN for APs) and AP can forward other client VLANs via CAPWAP tunnel?

@simple_networks 3 жыл бұрын

Generally, you will configure the switch ports you want to use for your AP's to be on your corporate network (VLAN) natively and allow any other VLANs through as tagged. The AP itself will remain on the corporate VLAN but the AP will tag all the traffic that goes through it based on which wireless network is being used. Hopefully that is helpful. I will probably do a video explaining all this as I am getting a lot of questions about it.

@SnowboardPowder 3 жыл бұрын

@@simple_networks can you please upload that video? Basically I’m after 2 networks that are separate but using the same WAP. EG home users on main network, guests are on VLAN with no restrictions but either network can’t see each other.

@egx2236 2 жыл бұрын

Thanks sir! I am purchasing a bunch of devices from Ubiquity for the first time and this is very useful.

@simple_networks 2 жыл бұрын

Glad I could help!

@nishantbagul1498 2 жыл бұрын

I just have one query can we set up 1 SSID with multiple VLAN? .(IP resolve using mac binding )

@cardsharks09 2 жыл бұрын

If you wanted to put wireless devices on a VLAN, would you apply the switch ports to the unifi access points as well?

@simple_networks 2 жыл бұрын

When you create your wireless networks, you will tie them to a specific VLAN. So just make sure that the switch ports you connect your access points to have a switch profile that allows all if those VLANs to pass through. You will also want to make sure that the native network on that profile is your main corporate network so that your access points can be seen by the controller.

@dr.victorstrange6848 2 жыл бұрын

How do you tag a port so it gets the IP of that VLAN instead of your default??????..I applied your video but my device still has the same IP of my default LAN.

@markjohnson5946 10 ай бұрын

What software do you use to record you tutorial videos in your presention ?

@ArminMirshamsi 2 жыл бұрын

Awsome video with great explanations. Thanks

@elinstitutodemandevilla Жыл бұрын

Good day, I am having some challenges creating the guest network. I have followed the steps to create a guest network, however when I create the guest network and the guest wifi, I am not able to connect to the guest wifi, my device doesnt get an ip address. I am only able to connect to the main wifi. The ISP modem is the one that issues the ip addresses. Should i make some changes there?

@simple_networks Жыл бұрын

I would check and make sure that the DHCP server for your guest network is set to your ISP modem's IP address. UniFi can get a little funky when mixing equipment.

@JakeLoeppky 2 жыл бұрын

Any way to assign different SSIDs a network with their own vlan without using a USG?

@SheldonMahase 3 жыл бұрын

Great job. Clear clean instructions. I used it on a USG-Pro-4 , cloud key and a UniFi Switch 16 POE-150W. I have successfully blocked all internvlan communication and so on. I don’t have any Ubiquiti access points. I have 2 questions. 1. I wish to block internal communication between devices inside the guest network? 2. Is there a way to limit speeds via mac accress or IP without using a Ubiquiti AP? I know this can be handled on the Ubiquiti APs I am looking or a firewall rule or a setting without using ubiquity APs.

@simple_networks 3 жыл бұрын

If you go into the settings of the network you are using as your guest network, you should see an option to turn on "device isolation" which will block all intercommunication from those devices for you on the network level (without Ubiquiti APs). Using the "new settings" go to Networks, click edit on your guest network, and under the advanced tab you should see the device isolation slider. As for limiting speeds, you can do it on a per-device basis in the unfi controller by setting up a bandwidth profile and applying to each specific device, or you can do it through Unifi AP's for a specific network. Unfortunately, there isn't a way to apply those bandwidth profiles at the network level.

@dchauvin 6 ай бұрын

Very helpful. Thanks!!

@alphonsesossou4283 2 жыл бұрын

Thanks for this useful video. But my switch profiles work only if I set LAN as native vlan and tagged any other combinations of the created vlans. Any advice?

@simple_networks 2 жыл бұрын

When you say “set LAN as native”, where is that happening? If you can tell me where in the settings, I can try to go in a take a look so I can get a better idea of what you are talking about.

@Nigmastar 2 жыл бұрын

Thanks for the video. Just to confirm, everything you showed is possible with the standard unifi switch, correct? (i.e. no need for a pro switch)

@simple_networks 2 жыл бұрын

It depends on the switch model, some of the super lower end/cheaper ones don't support custom profiles.

@jimholloway1785 2 жыл бұрын

Have you done any complete VLAN videos, with all the reasons why you would use different options . I am looking to create a VLAN for my test network for Server 2022 and I do not want to mix these IP's with my normal IP's I use for my home network. So I am really looking for videos on what items I should be creating in the VLAN, is it corporate or VLAN only and why one way over the other is better.

@simple_networks 2 жыл бұрын

I have not but I will definitely put that on my list of videos to make very soon! For now though I will say that if you are running all UniFi equipment (including your gateway/router) most things will be corporate networks. “VLAN only” is used only if you are passing vlans that live on a non-unifi device into the the UniFi system. Hope that helps!

@johnehrenreich8225 2 жыл бұрын

Very helpful!! Your explanation is excellent. I am running three different Unifi controllers the 2Classic and 1New. Will there be a VLANs in UniFi - Setup & Configuration video for New controller? I will be using a Checkpoint firewall that is the dhcp server, so Vlan only setting? Thanks

@simple_networks 2 жыл бұрын

Thank you for the feedback! I have a video showing how to setup new networks/VLANs in the new settings. However, I did not include in that video how to use the VLAN Only setting in new settings. A full tutorial might be worth making.

@bryonmiller4326 2 жыл бұрын

I'm a work from home employee, I have the UDM Pro router and will probably lose my job because they can't figure out how to get the VPN with forticlient to stay connected to me. I'm trying to figure out how to setup a DMZ Vlan so none of the security features apply to that connection. This looks like something that would help me do just that. When you make the switch profile, do I need to have an actual switch connected that this gets applied to? Or can I apply it to one of the ports on the UDM Pro itself? Also, any chance you could do a video on how to setup the firewall settings to mimick DMZ since this router doesn't have a DMZ port?

@simple_networks 2 жыл бұрын

You can apply those switch profiles to the switch ports built into the UDM Pro, no extra switch needed. As for the DMZ, I don’t know for certain but you might want to try setting up a VLAN and removing all restrictions in the firewall settings (allow all traffic). The only thing I would do is make sure that you isolate it from all your other VLANs. I will do more research on the topic and will certainly make a video if i come up with anything substantial.

@islandsnow 3 жыл бұрын

Is the switch profile how you create a trunk port? So the profile is what gets applied to a port and you say what vlans or networks it passes?

@simple_networks 3 жыл бұрын

Ya so the profile determines what VLAN is native and what VLAN is tagged for any given port or set of ports. To create a trunk port, you would create a profile that allowed all of your VLANs to pass through as tagged.

@Sopotastic 2 жыл бұрын

i dont see my swtich port? im using a tp link switch, what should i do?

@upciupci9022 3 жыл бұрын

Very concise and clear video, thanks. I have a question about VLAN only. I presently have a network setup via a UCK Gen2+, but since we have 49 AP's on it I need to move some of them (about 19) over to another UCK Gen2+ for performance issues. I was told the new CK could use VLAN only since it will only be managing AP's, but I was wondering if that was correct, or if it's even necessary. My main concern is security issues of course, along with performance. We also have 39 cameras but they are managed by a new UNVR so there shouldn't be any concerns there. Thanks

@simple_networks 3 жыл бұрын

Honestly, my recommendation would be to switch over to the Unifi Dream Machine Pro instead of adding a second cloud key. It has a built in Unifi Controller that has a lot more power than the cloud key and would most likely be able to handle all your access points. Plus it would be a much more simple and efficient setup. You could also look into a hosted controller. I don't have any knowledge of adding a second cloud key to a setup or how that would work so unfortunately I can't offer any advice on that specifically.

@ghulammujtaba8465 Жыл бұрын

Is unifi good for industries like power plants? please suggest

@leomaredcampos4941 9 ай бұрын

so, it can't work to other brand of switch?

@rkoperdak 3 жыл бұрын

Hi, I set the same like you. I got static ip address to my Synnology nas (192.168.20.10), VLAN20 192.168.20.1/24. But I cant connect to my nas and Nas has bad ip address. Can you help me , please? UDM-PRo (here is functional), USW-8-150W (here is not), Thank you Robert

@simple_networks 3 жыл бұрын

Check to make sure that you are passing all VLANs through to the USW-8-150W correctly. The uplink should be passing all vlans including the your main network.

@scico853 2 жыл бұрын

I have followed your steps however I do not have a corporate heading. I have only Lan. Am I missing something here help?

@simple_networks 2 жыл бұрын

Hmmm, that's odd. Can you tell me what equipment you are using?

@klekaelly 2 жыл бұрын

Excellent presentation, thank you.

@simple_networks 2 жыл бұрын

Glad you enjoyed it, thanks for the feedback!

@osburncerts3393 2 жыл бұрын

Good day, great information and allowed me to understand much better. However, I have a challenge. We live in an area where wireless backhaul is a must. I have a building that I must setup a guest wifi. In order to get access to this building, I use 2 sets of ubiquity UBB building to building devices. Building A to Building B, Building B to Building C. Building C has the WAP that I need for the guest wifi. Building A connects to the UBB via a ubiquity switch so that is no problem. How to I configure the UBB devices in order to pass both corporate network data AND Guest Wifi? I hope this makes sense. I use a UCK Gen2+ for the network, but DHCP is a Microsoft server.

@nprinslo 3 жыл бұрын

Very good informative video as usual. I am looking into setting up a vlan (I have SG, UCK, and UniFi mangled switches) as when my set top box is connected to the main network the switch shuts down the port, as I assume it thinks there is a STP storm) so trying to work out whether a vlan would help or how I could stop this from happening. I have set STP priorities - main switch being the lowest at 4096 etc. Any tips much appreciated, as Unifi support have been useless

@simple_networks 3 жыл бұрын

Ya Unifi Support is an oxymoron. My suggestion would be to put the set top box on it's own VLAN like you mentioned. Then using firewall rules, block the set top box's VLAN from communicating with any other VLAN. If there are specific devices on other VLANs it needs to talk to, add those in as exceptions to that rule.

@Sopotastic 2 жыл бұрын

Do i need a unifi switch for a custom port

@jimholloway1785 3 жыл бұрын

I really like the step by step process you are using. I just updated my UDM Pro to the firmware 1.9.0 and it seems like there is a problem when trying to go back to the Classic settings. So I am stuck in the new settings. I got all the way to the setting up the switch profiles and could not follow that. Any chance of another video on using the new settings and maybe some more detail on when you would use some settings like you did you talked about VLAN only, that was very informative. I see how you could do 7 videos on just selecting Corp/Guest/WAN/VAN Only/Remote User/Site to Site/VPN Client. I would really like to go further in understanding VLANs in Unifi, any suggestions??

@simple_networks 3 жыл бұрын

I will definitely be making some follow up videos to this one and will be sure to include your suggestions! The new settings cause a lot of confusion so I’m sure others are in the same boat. As for furthering your understanding, CrossTalk Solutions on KZfaq tends for focus on a lot of UniFi. He might not have specifically what you are looking to learn, but you can pick up a lot from watching his stuff.

@wenjagameplay Жыл бұрын

Thank you!!

@SteveMosetiAliyebarikiwa 2 жыл бұрын

You sound so much like Jesse Eisenberg🙂 great video!

@simple_networks 2 жыл бұрын

it's funny you say that, i've been told that a few times:)

@mozuconfig3222 2 жыл бұрын

my controller no select multi port to conffig?

@markjohnson5946 10 ай бұрын

Good video ❤

@IJayJayI 2 жыл бұрын

If anyone is trying to run 2 uplink networks like two different Internet connections on a switch, either VPN or two different ISPs on the same network and allocating vlans. I suggest using VLAN only. Then that helps a lot.

@druschel2000 2 жыл бұрын

Could you do a video on different subnets in unifi, especially one where a staff wired and staff wireless could be on different subnets?

@simple_networks 2 жыл бұрын

I will certainly add that to my list of video ideas!

@titoskerrett4917 2 жыл бұрын

How to you get the vlans to work if you're not using a ubiquiti switch?

@simple_networks 2 жыл бұрын

That would depend on the switch model. You would have to manually configure the VLANs in the back end of the switch.

@roiroi2923 2 ай бұрын

Hello Bro. How do I get to the dashboard?

@user15880__ 2 жыл бұрын

i need a help please i don't get how configure new version of unifay controller !!!! can same one help me plllllllllllllllz

@simple_networks 2 жыл бұрын

What part are you specifically stuck on? Setup in general or VLANs?

@grahamjones7814 2 жыл бұрын

How would I vLan a Wi-Fi Device, I have one UAP which does my entire house

@simple_networks 2 жыл бұрын

You would setup all your VLANs and then create a wifi network that corresponds to each VLAN. Then you would connect devices to those different wifi networks depending on which VLAN you want them interface with. Hopefully that makes sense:)

@oleksandrlytvyn532 2 жыл бұрын

Thanks

@AaronCzarnecki 2 жыл бұрын

Fantastic!!!!! Thank you!!!!

@simple_networks 2 жыл бұрын

Glad I could help!

@vejl 2 жыл бұрын

You helped me a very much, thanks :-)

@simple_networks 2 жыл бұрын

Glad I could be of service!

@harirajan2705 3 жыл бұрын

Good job sir

@simple_networks 3 жыл бұрын

Thank you!

@bicivelo 2 жыл бұрын

DUDE.... SWEET!!!!!! Thanks!!

@simple_networks 2 жыл бұрын

Glad I could be of service!

@bicivelo 2 жыл бұрын

@@simple_networks I love my unifi system but getting support through them is virtually impossible. Guides like these are a godsend to help fill in the gaps. Question, do you have a guide to setup VPN with a Unifi USG? IE connect remotely from my laptop client using L2TP (or similar) to my home network. There are some guides out there but not great. Usually they are too simplified, from what I have seen. The main issues I had was opening ports, not port forwarding because the vpn service will run natively in the router. In the meantime I'm using a free software server called SoftEther VPN that works well but I need to have a server on the other side running the VPN daemen. Anyhow, subscribed and liked. Thanks again!

@SnapJD 2 жыл бұрын

Good video but I don't need to know what your adams apple is doing

@simple_networks 2 жыл бұрын

I’m not picking up on what you mean, give it to me straight boss.

@ch40skappa64 2 жыл бұрын

We're still going with the old UI Thx... 2 more years and this video is outdated i dont want to learn old stuff...

@simple_networks 2 жыл бұрын

I am sure there is a video out there that can help you learn the same concept with the new UI. Plus, if I can get 2 more years out of this video without it being completed outdated, I will take it!

@ch40skappa64 2 жыл бұрын

Just saying I searched a lot and at the end I used the old UI… I mean being wrong isn’t a sin😂

@Yungbull2403 Жыл бұрын

I know all about vlans(I watch ltt and know nothing about vlans)

@Householdinstalls 2 жыл бұрын

You lost me when you said you would be using the old dashboard. Why? They made the new dashboard for a reason. This was outdated before you even posted it.

@simple_networks 2 жыл бұрын

That's a fair criticism. My reason for doing so was that many people were still relying on the old dashboard at the time because the new dashboard wasn't fully featured. I also felt that it was easier to for people who were new to the platform to understand. However, at this point I would agree with you that the video is in need of a refresh.