OPNsense Forum

English Forums => General Discussion => Topic started by: guest39556 on August 19, 2023, 10:12:37 PM

Title: VLAN AP Setup
Post by: guest39556 on August 19, 2023, 10:12:37 PM
I am trying to set up my Ubiquiti U6+ as an access point for my VLAN network, but cant seem to get the AP to get an IP from the VLAN, it will always choose one from the LAN. Is there a way to make it get a local IP from the VLAN instead?
Title: Re: VLAN AP Setup
Post by: lilsense on August 20, 2023, 12:00:14 AM
if you are gonna use multiple interfaces in a single VLAN then you need to create a bridge and place the interfaces in them then use the VLAN on the bridge.
Title: Re: VLAN AP Setup
Post by: guest39556 on August 20, 2023, 12:12:58 AM
Theres only one interface as below:

OpnSense -> Switch -> AP

I just want it to get a DHCP lease from the VLANs DHCP, rather than the LANS DHCP when I plug it into the switch, is that possible?
Title: Re: VLAN AP Setup
Post by: meyergru on August 20, 2023, 08:37:29 AM
Yes, but you have to set the AP to use the VLAN as primary network in the Unifiy controller. The default is to use the untagged (V)LAN as primary.

(https://i.postimg.cc/k6dnsfZg/Unbenannt.png) (https://postimg.cc/k6dnsfZg)
Title: Re: VLAN AP Setup
Post by: lilsense on August 22, 2023, 10:02:47 PM
you need to make sure the switch ports for the OPNsense/Switch/AP are all dot1q trunks that carry all the vlans.
Title: Re: VLAN AP Setup
Post by: guest39556 on August 23, 2023, 04:56:32 AM
I dont have the ubiquiti controller so ive basically been trying to work around it
Title: Re: VLAN AP Setup
Post by: newsense on August 23, 2023, 05:27:21 AM
The controller is not optional. Best option would be to run it in docker
Title: Re: VLAN AP Setup
Post by: iammike on August 23, 2023, 09:31:17 AM
^ +1

Or

https://pimylifeup.com/rasberry-pi-unifi/ (https://pimylifeup.com/rasberry-pi-unifi/)
Title: Re: VLAN AP Setup
Post by: newsense on August 23, 2023, 09:55:27 AM
Quote from: iammike on August 23, 2023, 09:31:17 AM
https://pimylifeup.com/rasberry-pi-unifi/ (https://pimylifeup.com/rasberry-pi-unifi/)

Absolutely _NOT_

Until Unify moves away from the Mongo disaster the most secure option is to run it in docker/podman.

Installing old/vulnerable software on top of the main OS is only a recipe for disaster going forward.
Title: Re: VLAN AP Setup
Post by: iammike on August 23, 2023, 10:16:40 AM
noted
Title: Re: VLAN AP Setup
Post by: Saarbremer on August 24, 2023, 01:02:05 PM
Regarding the first question, you can achieve that. But it won't do you anything good without a unifi controller.

In default config the AP uses untagged network for network access. So configure the VLAN to be untagged on that specific port. But I don't know where you might want to go from there without a controller.