VLAN setup not working?

I'm trying to setup a new guest VLAN for some new Unifi AP's I'm testing internally and I'm going round in circles. I will be the first to admit my VLAN game isn't as strong as it probably should be, but I have tried various configs and its just not working. Can anyone shed any light?

The setup is:

Draytek 3220 router - https://snipboard.io/LkJVjz.jpg

Draytek LAN1 -> Switch Port 1

D-Link DGS-1024 switch - https://snipboard.io/XQ7tZc.jpg & https://snipboard.io/78QKuV.jpg

Switch Port 25 -> LAN1 on Unifi AP

Unifi AP - https://snipboard.io/8Qf1qR.jpg & https://snipboard.io/HLTi0b.jpg

My test device can connect to the wireless but doesn't get an IP address. I have done similar setups before without issues but normally plug the AP's directly into the router LAN ports. This Draytek only has a single LAN port so I'm routing the VLAN through the D-Link switch and I think that's where the issue is? I'm pretty sure as the Guest SSID/Network is tagging the packet that the setting on the D-Link should be 'Tagged' but its not working?

Cisco ISE with Open WiFi Authentication

Bit of a Cisco ISE and WiFi noob,

Does anyone know if it is possible to have Cisco ISE authenticate a device access to an SSID without been prompted for a username/password, and also without any client based authentication?

A client wants to have some OT devices connect to a hidden SSID without any user intervention, but to use ISE profiling for dynamic VLAN assignment.

My understanding so far is that this is not possible. EAP seems to be the trigger to direct SSID authentication to ISE in which either a username/password or certificate has to be used to authenticate before hitting the authorization policy where the device profiling/dynamic VLAN assignment happens.

If someone can confirm my theory or have a potential solution, that would be a great help.

Thanks

Extreme networks problems

I tried to post this question in the /r/extremenetworks sub but have to be approved to post.

I inherited a extreme cloud installation at five sites when I took this job. It works, mostly. We need to add some external access points and one internal access point at one of our facilities. The problem is we can't seem to purchase any additional licenses for the original extreme cloud product. Only the extreme cloud IQ product. We are being told we would have to pay for new licenses for all of our existing access points in order to move to the new platform.

Has anyone else encountered this problem?

Cisco configs to Dell Switch

Is there a way to copy a Cisco config from a 3750G to a Dell n2048P switch on the CLI?

Do I have to use the Dell open mange switch GUI for configuring the setting form the Cisco switch?

Struggling to properly configure Vlans on Cisco sg350x

Hey guys,

I need some help with configuring a switch (SG350x) , my boss has thrown me in the deep end while he's off work. He's asked me to get a switch up and running and this is a bit of a struggle for me since I'm the O365 and Server guy in the organization.

He wants a switch configured with

a layer 3 Vlan for VOIP, with 4 of the ports to be access vlan x to connect the pbx, sbc, laptop etc.

Whatever that means...

I'm really struggling with this one, a lot of this stuff is kind of over my head, I'm also not very familiar with Cisco either, unfortunately.

I've gotten the switch online, have assigned vlan1 an IP and the switch itself has an IP address.

I've created a VLAN with an ID of 10, I have added 4 ports under port to vlan membership to vlan 10. I have configured an IP address under ipv4 interface settings and have tied it to vlan 10.

However, when plug into one of the ports associated with my vlan, I'm getting an APIPA address. I'm really not sure what I'm doing wrong.

Can someone kindly, in an idiot-proof way, explain to me where I'm going wrong? How the heck do I assign an IP range to my vlan? I've gone over dozens of articles on creating vlans but I cant seem to figure this one out.

thanks!

Anyone script an interface and a device pull from VeloCloud Orchestrator?

We've got some VeloCloud Edges and an Orchestrator. I'd like to easily do a Top 10 Interface utilization report, a Top 10 CPU, a Top 10 Memory Utilizaiton. And maybe a worst Jitter/Packet Loss/Delay report. Right now I can go in to Orchestrator, but it is very much look at everything and whittle your way down. Is anyone scripting a daily pull of hourly utilization?

Ethernet Cable Question for Work

I do not know if this is the right subreddit to ask this question.

At work we are trying to setup some doors and the ethernet that they came with have different colors inside the sleeve. They are brown blue yellow green red black orange and grey. We needed some more wires because we think some of the ones we got were bad so we purchased some Cat6 wires and they came with the standard colors (blue, blue white etc). We asked the company's tech support to see how we can interchange the colors and they gave us a key in which colors to substitute, sadly it did not work. We decided to test another portion of the door that required the RJ45 connection on both sides and things did not work as they were supposed to. So we came to the conclusion that the wires may not be interchangeable. I am hoping someone here might have some insight in what we can do or where we can purchase that specific ethernet wire.

I know most people will think why would a door require ethernet cables, this company is like a manufacturer so the doors need to lock or unlock based on certain parameters and they communicate via 2-4 ethernet cables/door.

Thank you for all your help

Are there many ways to run a server?

I have few questions. I got into networking a few days ago, I'm still a big newbie, so please don't judge me.

1) To host a file, you need to have it on a localhost, am I right? Are there other ways?

2) I have seen python command for cmd: python3 -m http.server [port number] It puts the directory you are in into a localhost, right? Does XAMPP do something similar? Is that its purpose? If so, what does MySQL option do? I know it has to do something with databases, but I can't figure it out.

3) Except that python command (and maybe XAMPP aswell), I have heard that there are other ways to put something into a localhost. Is there a special way for Linux OS? Does Microsoft have its own way they have developed?

4) Most of the people on youtube use port 8000 for their server. Can you choose whatever port you want? Does port determine which protocol is used? If so, can I use port 80 for http?

Thank you in advance!!! Sorry for any grammatical mistakes, English is not my native language! :)

How important is DDI for VPN?

Probably a dumb question but how integrated does your VPN solution need to be in rendering DDI (DNS / DHCP / IPAM) services?

VPN (or at least "old school" fixed perimeter VPN) is mostly accomplished using IP whitelist tables. So that would plug into the IPAM part of DDI, right?

Does next-gen dynamic firewall stuff (like SDN / SDP) also need to plug in to DDI services? I would think it does since the SDP gateway controller would need access to IP routing tables (plus a certificate) in order to figure out which entities / users to grant access to?

Wireless Lab Ideas

Is there a cheap alternative to a Cisco wireless controller and Cisco WAP? I was wondering id there was possibly a Linux alternative which would allow me to a set up a lab and assist me wireless study?