EAP sending traffic both tagged and untagged

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
12

EAP sending traffic both tagged and untagged

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
EAP sending traffic both tagged and untagged
EAP sending traffic both tagged and untagged
2023-05-26 19:47:53
Model: EAP670  
Hardware Version: V1
Firmware Version: 1.0.3

Hello,

 

I have a new EAP670v1 running 1.0.3.  This is my first Omada configuration.

 

I have a very simple setup, 2 SSIDs, one on 2.4 and the other on 5 Ghz.  Both SSIDs are assigned VLAN100.  The mgmt vlan is 600, but is sent as a native, so untagged.

 

After the AP starts taking on clients, it starts sending data on both VLAN100 and 600 intermittently, so nothing is able to communicate with the network correctly.  Output from Cisco switch (I've highlighted a duplicate as an example):

 

switch1#show mac address-table interface gigabitEthernet 1/0/8
          Mac Address Table
-------------------------------------------

Vlan    Mac Address       Type        Ports
----    -----------       --------    -----
 100    14c1.4e65.ff86    DYNAMIC     Gi1/0/8
 100    14c8.8b24.ec39    DYNAMIC     Gi1/0/8
 100    201f.3bd8.4930    DYNAMIC     Gi1/0/8
 100    582f.407e.4b59    DYNAMIC     Gi1/0/8
 100    9c76.13d8.3131    DYNAMIC     Gi1/0/8
 100    a45e.60be.5231    DYNAMIC     Gi1/0/8
 100    a477.3375.c856    DYNAMIC     Gi1/0/8
 100    d436.398f.7944    DYNAMIC     Gi1/0/8
 600    14c8.8b24.ec39    DYNAMIC     Gi1/0/8
 600    1c61.b4cc.6764    DYNAMIC     Gi1/0/8
 600    5231.8100.0064    DYNAMIC     Gi1/0/8
 600    5231.8100.c064    DYNAMIC     Gi1/0/8
 600    a45e.60be.5231    DYNAMIC     Gi1/0/8
 600    ec39.8100.0064    DYNAMIC     Gi1/0/8

 

I have tried moving the management VLAN to a tagged VLAN, but the packed still arrive as duplicates, on VLAN1 instead.

The data is being sent in a load balanced method, oddly.  If I block every other VLAN, traffic is dropped from the client perspective, but I suspect the EAP is still trying and the switch is just dropping the traffic.

 

Anyone have any troublehsooting ideas?  I am out of ideas.

Switch config:

interface GigabitEthernet1/0/8
 description access-point
 switchport trunk native vlan 600
 switchport mode trunk
 switchport nonegotiate
 spanning-tree portfast edge trunk
 spanning-tree bpdufilter enable
 spanning-tree guard root

-T
  0      
  0      
#1
Options
18 Reply
Re:EAP sending traffic both tagged and untagged
2023-05-26 20:15:22

I have updated the AP to 1.0.6, still the same issue, FYI.  Controller is on latest firmware as well.

-T
  0  
  0  
#2
Options
Re:EAP sending traffic both tagged and untagged
2023-05-26 20:36:59

  @Tyrade 

do you define management vlan on access point?

config and serice tab. if not, the access point still thinks it is on vlan1

  0  
  0  
#3
Options
Re:EAP sending traffic both tagged and untagged
2023-05-26 20:46:21

  @shberge 

 

Originally I did, however the behavior was the same.

My understanding is, the management vlan setting is only needed if the management vlan is arriving to the AP as tagged. In my configuration, it is not. 

-T
  0  
  0  
#4
Options
Re:EAP sending traffic both tagged and untagged
2023-05-26 20:57:06

  @Tyrade 

 

I'm not sure, but I have something similar to the unifi access point and the switch port config is like that.

 

interface GigabitEthernet1/0/8
 description AcessPoint
 switchport trunk allowed vlan 1,100, 600
 switchport mode trunk

 

I not use native vlan on port where controller or access point is connected.

in my config is vlan 1 mangement but if you dont have native vlan and you set vlan600 as management on access point it should be the same i tink.


 

  0  
  0  
#5
Options
Re:EAP sending traffic both tagged and untagged
2023-05-26 23:55:19

  @Tyrade 

 

Is your Apple device configured with both SSIDs? And, perhaps on both of them to connect automatically?

 

Kris K
  0  
  0  
#6
Options
Re:EAP sending traffic both tagged and untagged
2023-05-27 01:47:20

  @KJK sorry, not understanding the question. I have a range of devices in the house configured for both 2.4 and 5ghz, apple, android, windows, appliances, Chromecast, etc. I don't think that is part of the issue though. 

-T
  0  
  0  
#7
Options
Re:EAP sending traffic both tagged and untagged
2023-05-27 10:35:37

  @Tyrade 

 

Why not? It is a standard for WiFi devices to try different frequencies if they are not happy with them for whatever reason. In your configuration, where individual SSIDs are used for each frequency, this will result in switching SSIDs and translate into switching VLANs. Also nowadays, many WiFi devices have this annoying feature of switching repeatedly SSIDs if they can't connect to Internet. There is nothing wrong with your VLAN setup. And, your suspicion that the AP duplicates the traffic is a very long shot. Such a bug would be easily caught in firmware testing. It would also make many users screaming and it would not go unnoticed by the product reviewers.

Kris K
  0  
  0  
#8
Options
Re:EAP sending traffic both tagged and untagged
2023-05-27 17:14:46

  @KJK Because both of OPs SSIDs are on VLAN 100, yet the devices are being seen on VLAN 600, of which neither SSID is assigned.

  0  
  0  
#9
Options
Re:EAP sending traffic both tagged and untagged
2023-05-27 17:56:28

  @Napsterbater thank you, that is correct. I agree the behavior is crazy, but I have the logs to prove it. 

-T
  0  
  0  
#10
Options
Re:EAP sending traffic both tagged and untagged
2023-05-28 23:37:42

  @Napsterbater 

I have read that, but I do not believe.

Kris K
  0  
  0  
#11
Options