Questions on UDP, Guest WiFi, LAN, and Unifi.
-
We've been presented with a challenge I need to gain some more knowledge on before I can accomplish it.
I'd like to dummy up through discussion, without being berated or told something is wrong. Instead of a pessimistic discussion, I would like an optimistic discussion with the conversation leading to a solution and new knowledge, not regret.
I have been asked to prepare for another vendor to add an "audio to WiFi" media server to the open Guest WiFi on the LAN.
This is the device being added:
Listen Tech LW-100P-02 LISTEN EVERYWHERE 2 CHANNEL SERVER
and the IT info is in this document:
https://www.listentech.com/wp-content/uploads/2018/10/LTN0025-Network-Config-Guide-for-LE-compressed.pdfI readily admit I am not a master at VLAN or Guest Isolation, but I am more than eager to reach expert levels. Which is why I agreed to handle the IT side of this project.
Existing LAN:
- Sonicwall Router
- Variety of switches with and without PoE; with and without IGMPv2, with and without VLAN capability
- Subnet is 192.168.0.1/23 (192.168.0.1-192.168.1.254)
- LAN ethernet devices are across all switches
- 55 Phones are across all switches AND tagged VLAN-100
- 100 Unifi APs are across all switches
The Sonicwall is Providing DHCP services to the computers, printers, APs and Guests, and this can be moved to another device or server.
UniFi APs are providing 4 SSIDs and two of them can be removed.
The phones use VLAN-100 to get to their IP and to reach the Mitel 5000 Phone controller
The Listen tech devices broadcast on UDP and I was told they work with IGMPv1.I need to get the Listentech devices visible on the guest wifi, which has guest policies applied in UniFi.
As I understand the UniFi guest policies, they isolate the client to the gateway only. I think this may prevent the wifi clients from finding and streaming from the Listen Tech device.The Listentech equipment is not onsite yet, so I don't know if it will work as is. I do want to understand what I may be facing, so I can make sure I understand where I should look for issues if there are any.
Also, should I be dumping Guest Policies from UniFi and moving to VLANs? I'll need to ask some very pointed questions of the customer to know if this is even possible with their current method of operating.
I understand you may have questions before you have advice, so please ask away.
Thanks
-
@JasGot said in Questions on UDP, Guest WiFi, LAN, and Unifi.:
Listen Tech LW-100P-02 LISTEN EVERYWHERE 2 CHANNEL SERVER
Oh this is assistive listening tech. This should be good, solid equipment. This company has been around for a long time I believe.
-
@JasGot said in Questions on UDP, Guest WiFi, LAN, and Unifi.:
Guest Isolation
As recommended in their guide, I would try the guest network option first. No need to make things more complicated if you don't need to by using vlans.
-
@jmoore said in Questions on UDP, Guest WiFi, LAN, and Unifi.:
@JasGot said in Questions on UDP, Guest WiFi, LAN, and Unifi.:
Guest Isolation
As recommended in their guide, I would try the guest network option first. No need to make things more complicated if you don't need to by using vlans.
If these policies are using isolation, they should be blocking access to everything but the DFG IP. I think this is an either or scenario.
-
@JasGot said in Questions on UDP, Guest WiFi, LAN, and Unifi.:
Existing LAN:
- Sonicwall Router
- Variety of switches with and without PoE; with and without IGMPv2, with and without VLAN capability
- Subnet is 192.168.0.1/23 (192.168.0.1-192.168.1.254)
- LAN ethernet devices are across all switches
- 55 Phones are across all switches AND tagged VLAN-100
- 100 Unifi APs are across all switches
You have the VLAN using the same subnet as the untagged traffic?
-
@JaredBusch said in Questions on UDP, Guest WiFi, LAN, and Unifi.:
You have the VLAN using the same subnet as the untagged traffic?
Not my VLAN and I haven't had a chance to look at it.
Based on the DHCP info I have seen acquired by the phones, I would have to say the VLAN-100 is on another subnet and has it's own DHCP server. The Mitel 5000 and one other Phone system device (Xarios?) have IPs on the business LAN, the phones do not. I think those two devices have IPs on my LAN because they need internet access.
I'm hopeful I can move forward is if the phones weren't there at all....... I don't think there'll be any toe stepping.
