I bought an AP, router, and switch online so I can have a bit more advanced setup at home. The switch is a tplink sg108pe, which has 8 ports, 4 of them being POE, and a bunch of goodies. The router is an edgerouter x from ubiquiti. I was screwing around with it yesterday and the UI is fantastic. The AP is a ubiquiti uap-lite.

I set up DHCP and vlans on the router yesterday. I didnt set up a routing since its just the one router and switch. Eth0 on the router goes to port 8 of the switch, port 1 on the switch goes to AP, port 7 is my desktop.

Vlans are
20: wireless- 10.0.20.0/24
30: wired- 10.0.30.0/24

i have the ip on the router set to 10.0.0.1 and the switch at 10.0.0.2

DHCP doesnt appear to be working, i have to statically set my addresses

For some reason, I cant get the vlans to work on my switch. There isnt an option(or i dont see it) to set up a trunk from port 8 to the router,

Can you guys help me figure this out, and explain why I am doing what I am doing?

Any help would be appreciated, feel free to ask questions because I amsure I forgot something.

Hello,

Im a systems network admin with an associates in networking and about a year of experience. Im here because I love learning

Can i get a bump? I wont have internet after i get off work and I want to make sure everything from above looks good. I dont need a MGMT vlan do i?

@scottalanmiller Will do. Ill let you know how it goes later. Ill try to find a wizard as well.

UPDATE:
This is just a copy and paste from my message to SAM btw

I got the firmware updated on all my devices and I got my network up. Not like I want though.

So I had it working with VLANS(as in DHCP, DNS, and routing were working), but then i had issues because my AP (10.0.10.2) couldnt connect to the desk(which is the wireless controller) which is 10.0.20.2

It had something to do with L3 integration on the AP, and I spent 9 hours on the support with Ubiquiti. They basically told me to wait for the next patch for the L3 support.

So i had to remove my vlans and just have a flat network. :((((

So with tagging vlans, i have a question:
the ports you tag on are the "trunks" in cisco terms?

On my switch, what i did is i tagged ports 1, and 8
1 is the AP, and then 8 is the switch->router port
I did this on both vlan 10 and vlan 20
this makes it so that if vlan 20 traffic goes to the wireless it will actually work correct?

I have a TPLink SG108PE.
It can do 802.1Q Vlanning. I have 8 ports and you can assign a PVID per port, and also assign which ports are tagged and untagged.

Port 1 goes to my AP, so it will be be a "trunk" in cisco terms.
Port 8 goes to the router, so it will be to be a "trunk"

Ports 3-7 will be vlan 20, and
port 2 will be 10

Wired is vlan 20
wireless is vlan 10

Am I correct in that ports 1 and 8 need to be tagged for both vlan 10 and 20, and that they are untagged for 2-7?

Am I correct in that ports 3-7 will have a PVID of 20, and port 2 will have a PVID of 10?

Am i correct in that ports 1 and 8 will have a PVID of 1 (the default)?

https://community.spiceworks.com/topic/398670-cisco-dhcp-windows-dns

We have a few sites that we cant justify a server for DHCP/DNS on, so we have the cisco device do the DHCP and then point the DNS to our datacenter.

We have all of the Windows DNS/DHCP zones on Secure only, and dynamic updating.

How do we set it up so that DNS can be dynamically updated? Can we make the cisco device somehow secure so that we can have secure zones?

I had a couple ideas, tell me how bad they are:

1. Use group policy to force dns updates:

• Computer Configuration\Policies\Administrative Templates\Network\DNS Client\Register DNS records with connection-specific DNS suffix > Enabled

• Computer Configuration\Policies\Administrative Templates\Network\DNS Client\Register PTR Records > Register if A record registration succeeds

2. Use ip helper to point those dhcp/dns request to the datacenter, which would therefore make them secure since the DHCP server would do the DNS parts

@scottalanmiller we have an ERP system that MOST of the companies work is done in.

They could still use office and such, but without the link the ERP stuff is useless. Production could continue on paper, it would just slow down

Email isnt local either, we use cloud based email which is stemmed from the datacenter.

That is a good point thank you for mentioning that

Here is my situation:
I have a vcenter server (5.5) managing a single blade-iucs01

I had to upgrade vcenter to 6.0, and then add our new ucs- rrucs01-04
The upgrade failed and the error told me to contact VMware, vmware told me to uninstall vcenter on vcenter server and then reinstall with 6. I did this. I then could not use my domain credentials to login, but I at least was on 6.

I added the license and made a cluster(which it would not let me use DRS from license, not a priority). I added the four new blades to the cluster, and got a bunch of HA errors. On top of that, I cant add iucs01 to the datacenter so i can manage it. I dont know much about vmware, and I need help. What else and i missing?

Also, how do I find the SAN? It doesnt show up under datastores

Here is my situation:
I have a vcenter server (5.5) managing a single blade-iucs01

I had to upgrade vcenter to 6.0, and then add our new ucs- rrucs01-04
The upgrade failed and the error told me to contact VMware, vmware told me to uninstall vcenter on vcenter server and then reinstall with 6. I did this. I then could not use my domain credentials to login, but I at least was on 6.

I added the license and made a cluster(which it would not let me use DRS from license, not a priority). I added the four new blades to the cluster, and got a bunch of HA errors. On top of that, I cant add iucs01 to the datacenter so i can manage it. I dont know much about vmware, and I need help. What else and i missing?

Also, how do I find the SAN? It doesnt show up under datastores

@scottalanmiller we have an ERP system that MOST of the companies work is done in.

They could still use office and such, but without the link the ERP stuff is useless. Production could continue on paper, it would just slow down

Email isnt local either, we use cloud based email which is stemmed from the datacenter.

That is a good point thank you for mentioning that

@scottalanmiller which is true, however if the link goes down there isnt much they can do anyways as most of our stuff is desktop->datacenter and not peer to peer

Right? The only thing I can think of that is LAN would be printing but if the printer is static it would still work?

https://community.spiceworks.com/topic/398670-cisco-dhcp-windows-dns

We have a few sites that we cant justify a server for DHCP/DNS on, so we have the cisco device do the DHCP and then point the DNS to our datacenter.

We have all of the Windows DNS/DHCP zones on Secure only, and dynamic updating.

How do we set it up so that DNS can be dynamically updated? Can we make the cisco device somehow secure so that we can have secure zones?

I had a couple ideas, tell me how bad they are:

1. Use group policy to force dns updates:

• Computer Configuration\Policies\Administrative Templates\Network\DNS Client\Register DNS records with connection-specific DNS suffix > Enabled

• Computer Configuration\Policies\Administrative Templates\Network\DNS Client\Register PTR Records > Register if A record registration succeeds

2. Use ip helper to point those dhcp/dns request to the datacenter, which would therefore make them secure since the DHCP server would do the DNS parts

UPDATE:
This is just a copy and paste from my message to SAM btw

I got the firmware updated on all my devices and I got my network up. Not like I want though.

So I had it working with VLANS(as in DHCP, DNS, and routing were working), but then i had issues because my AP (10.0.10.2) couldnt connect to the desk(which is the wireless controller) which is 10.0.20.2

It had something to do with L3 integration on the AP, and I spent 9 hours on the support with Ubiquiti. They basically told me to wait for the next patch for the L3 support.

So i had to remove my vlans and just have a flat network. :((((

So with tagging vlans, i have a question:
the ports you tag on are the "trunks" in cisco terms?

On my switch, what i did is i tagged ports 1, and 8
1 is the AP, and then 8 is the switch->router port
I did this on both vlan 10 and vlan 20
this makes it so that if vlan 20 traffic goes to the wireless it will actually work correct?

I have a TPLink SG108PE.
It can do 802.1Q Vlanning. I have 8 ports and you can assign a PVID per port, and also assign which ports are tagged and untagged.

Port 1 goes to my AP, so it will be be a "trunk" in cisco terms.
Port 8 goes to the router, so it will be to be a "trunk"

Ports 3-7 will be vlan 20, and
port 2 will be 10

Wired is vlan 20
wireless is vlan 10

Am I correct in that ports 1 and 8 need to be tagged for both vlan 10 and 20, and that they are untagged for 2-7?

Am I correct in that ports 3-7 will have a PVID of 20, and port 2 will have a PVID of 10?

Am i correct in that ports 1 and 8 will have a PVID of 1 (the default)?

@scottalanmiller Will do. Ill let you know how it goes later. Ill try to find a wizard as well.

@scottalanmiller oh okay. I understand. I will in the future, budget is currently tight. didnt have much of an option. I just moved to this place and had to get my own router so i just got a decent one and am trying to get it up

@scottalanmiller SO are you saying i should return the one I have and get the edgerouter x?

@JaredBusch if you are going to be rude, please dont post in my thread. Your posts are coming off as aggressive and I am just trying to get some advice and learn a little.

@scottalanmiller is there a reason i have to do it via wizard? i just feel like im missing out on learning something if i just do a wizard instead of configuring the thing myself, you know?

I will get you guys an update as i can. something came up at work