Ubiquiti & Firewalla Gold

Follow

FC

• January 10, 2021 01:45

Hello All,

I apologize if this has been asked before (likely), but I wasn't able to find it quickly.

I have a question on config and VLAN's.  Here is my network in a simple view:

Comcast Modem > FWG > Unifi Switch (main) > AP's and more downstream switches

Only two ports on the FWG are in use.  One for the modem and the other for the main switch.  All other devices are off of the main switch.  3 AP's and about 4 more switches.  I am going to VLAN things out.

Questions:

• Am I heading down the optimal path for topology?
• Do I need to create a VLAN interface at all on the FWG?

I am creating the SSID's and VLAN's in the Unifi controller and the switches should handle all traffic.  That keeps ONLY internet bound traffic flowing through the FWG.  I am unsure if I need to do anything with VLAN interfaces on the FWG.

I welcome any advice or feedback.

Thank you all!

 

0

• 

  FC

  • January 10, 2021 01:49

  I "may" have answered a piece of my question above, I "think" i will need to define the VLAN's on the FWG for DHCP purposes?

  0

  Comment actions Permalink
• 

  Firewalla

  • January 10, 2021 03:09

  Yep, you will need to define the segments on the FWG, so devices on your VLAN's can get the DHCP address.

  0

  Comment actions Permalink
• 

  FC

  • January 10, 2021 03:12

  Thank you!

  0

  Comment actions Permalink
• 

  James Willhoite

  • January 10, 2021 15:51

  Correct, vlans defined at the FWG and tag the correct ports on the switches.

  0

  Comment actions Permalink

Please sign in to leave a comment.