ubiquiti:vlan
This is an old revision of the document!
Ubiquiti - VLAN
VLAN's and IP-intefaces:
- VLAN is a Layer 2 (L2) technology; data is sent between clients using mac-addresses.
- VLANs limits broadcast/flooding a domain.
- Only clients in the same VLAN and with IP-addresses in the same subnet, can send data to each other.
- It is not possible to configure any DHCP on A VLAN, since VLAN is a L2 technology and DHCP requires an IP-interface, which is a L3 technology, so this VLAN should either be connected to an external DHCP-server or use static IP-addresses on the clients.
- IP-interfaces is a Layer 3 (L3) technology; data is send between clients using IP-addresses.
Ubiquiti always uses VLAN 1 as the untagged native VLAN.
NOTE: There are many different network types that can be created:
Any of these networks can be allocated to a VLAN.
- Corporate is a general purpose network and by default is assigned to LAN.
- The UniFi controller will provision not only the VLAN itself but also a matching IP subnet for this VLAN.
- Clients associated to the VLAN uses the IP-interface as a default gateway to reach anything outside the VLAN, like other hosts on other VLAN's, the internet and so on.
- On this VLAN it's possible to configure a DHCP-server locally on the switch to provide IP-addresses to clients.
- IP subnets exist at Layer 3, whereas UniFi switches are purely Layer 2.
- Therefore, if you have no USG, there's no point in creating a “Corporate” VLAN.
- Guest will apply the Guest Control setting if you enable the Guest Portal.
- VLAN Only will remove any subnet options and can be used to define VLANs for pure VLAN tagging purposes by Unifi switches.
- This allows you to add/remove a VLAN tag to network packets on a switch port (for instance) connected to another, non-Unifi network device that expects/sends these.
- It is not possible to configure any DHCP on this, since VLAN is a L2 technology and DHCP requires an IP-interface, which is a L3 technology, so this VLAN should either be connected to an external DHCP-server or use static IP-addresses on the clients.
- This is the best choice to use for a VLAN, if not using a USG.
- VPN Client is USG specific.
- Site-to-Site VPN is USG specific.
- Remote user VPN is USG specific.
ubiquiti/vlan.1607559434.txt.gz · Last modified: 2020/12/10 00:17 by peter