Unifi AP + controller and unmanaged switch with rpi4

Hi guys,

I have a rpi4 setup and I got a USB ethernet adapter.

WAN: works fine with USB ethernet, its OK for now.

LAN: with cable is working fine with an unmanaged TP-link switch.

I got some Issues with the Unifi AP.
My AP is on the VLAN 101 (without any DHCP or other settings) and I would like to connect this AP to my LAN network.

I tried a few things from google but can't get to work.
Any Help would be welcomed :slight_smile:

root@OpenWrt:/etc/config# cat network

config interface 'loopback'
        option device 'lo'
        option proto 'static'
        option ipaddr ''
        option netmask ''

config globals 'globals'
        option ula_prefix 'xxx1:xxxx:xxxx::/48'
        option packet_steering '1'

config device
        option name 'br-lan'
        option type 'bridge'
        option ipv6 '0'
        list ports 'eth0'

config interface 'lan'
        option proto 'static'
        option netmask ''
        option ip6assign '60'
        option ipaddr ''
        option device 'br-lan'

config interface 'wan'
        option proto 'dhcp'
        option device 'eth1'
        option broadcast '1'
        option peerdns '0'
        list dns ''
        list dns ''

config interface 'docker'
        option device 'docker0'
        option proto 'none'

config device
        option type 'bridge'
        option name 'docker0'
        list ports 'vethb7b9dd7'
        option bridge_empty '1'
        option ipv6 '0'

config device
        option name 'eth1'
        option ipv6 '0'

config device
        option name 'eth0'
        option ipv6 '0'

config device
        option name 'veth4c78502'
        option ipv6 '0'

ps the docker interface and veth4c78502 are my Unifi Controller.

Where does VLAN 101 "originate" in your network? Why is the AP on VLAN 101?

Can you draw a topology diagram (a photo of a sketch on paper is perfectly adequate here)?

This will likely present an issue -- unmanaged switches should never be used with VLANs.

That said, the diagram and the description about why you're using VLAN 101 may clarify a lot.

Why am I using VLAN on unifi APs? In this case, I don't need to set up anything in the unifi controller network section and I cloud set up a second WIFI for guests from the same AP.

Here are my draw and shots from unifi controller wifi section.


and the draw

Thanks for the additional info.

A few thoughts:

If you're using a flat network, you do not need to use VLANs at all.
There are two ways of creating a guest network in your scenario:

  1. Create a network as a VLAN on the Pi with the desired permissions/restrictions in the firewall.
  2. Use the guest network feature in the Unifi Network Application.
    -- IIRC, the guest network function on the APs (without a Unifi based gateway) will prevent routing from the guest network to your main network, but the rules may not have all that much granularity. If you want a totally isolated guest network, that would be an option. Full disclosure, though... I run a full unifi stack and configure everything manually. I have never ever tried the pre-defined guest network option (with or without a unifi gateway).

If you go with option 2, you don't need to change anything on the Pi or your hardware. And you don't need to use VLANs at all... your AP will live on the standard untagged network, and the rest will happen within the AP itself (via the Unifi firmware).

If you decide you'd like to use option 1, you really should be replacing your switch with a VLAN aware/managed model. The behavior of VLANs through unmanaged switches is undefined -- sometimes it is fine, other times it can cause problems on your network.

With option 1, you'll simply create a new network interface using device eth0.101. It's simple -- set up the network interface, assign it to a firewall zone (a special guest zone is recommend) and establish the desired rules, and usually configure a dhcp server for the guest network.

Thank you for the heads up!
I was able to make a guest network with option 2.

What about the main wifi settings in the AP? What ip ragen should I set up there? Or just leave default because it will be not used?

^^^ this. Since you don't have a Unifi gateway (USG/Pro, UDM/Pro/SE, UDR, UXG), those settings are not active.

If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.