ER8411 DPI no data
I tried both custom and the latest beta version of the firmware.
I've enabled DPI via: Settings > Network Security > Application Control > Deep Packet Inspection
Statistics>Application Analytics shows no DPI data
Reports/APPFLOW shows no data.
- Copy Link
- Subscribe
- Bookmark
- Report Inappropriate Content
Hi @ttocsr
I can certainly tell you that DPI works because I tested it on this version before.
1. Is your controller under the same network? Rule this out?
2. Have you configured it correctly? LAN is properly set?
I am very glad to read about your verification and configuration steps. Please attach screenshots.
- Copy Link
- Report Inappropriate Content
@Clive_A I have the controller connected via management vlan 4090. I have no ACLs setup between VLAN 1 and VLAN 4090, I'm able to ping between the subnets setup on each vlan.
Does the controller have to be in the same VLAN and subnet as the traffic I want to get DPI with? Is there documentation on how to get DPI to work on a specific VLAN while keeping the controller connected via the management VLAN?
- Copy Link
- Report Inappropriate Content
Hi @ttocsr
Thanks for posting in our business forum.
1. There is a function literally called management VLAN, are you referring to that? It is to isolate the networking devices from the regular VLAN int. I see a lot of people messing around with the "management VLAN" but actually it's just the name "management VLAN".
Your description seems to be namely "management VLAN".
2. No. If there is a guide, that'll be a single guide to illustrate the DPI or VLAN config. There are thousands of ways to use several features at the same time, we cannot write all the different mixes. So, I can tell you that we have two separate guides. Learn one at a time and use them at the same time later.
3. If it is literal management VLAN, there is no way to bypass it. You probably need to Wireshark now to find out if port 29815 is communicating with the controller. If yes, it is not the first case I am talking about.
4. I am asking if you have set up DPI correctly. Because you gotta set a LAN to where DPI takes effect. Can you confirm this?
- Copy Link
- Report Inappropriate Content
@Clive_A thanks, I am speaking of the actual management VLAN feature.
I found it odd that there was no LAN selection where I enabled DPI. I think this is what I'm missing. Where do I select the LAN for DPI? I'm using software controller 5.13.30.8
- Copy Link
- Report Inappropriate Content
Hi @ttocsr
Thanks for posting in our business forum.
If you are using management VLAN, so router and the controller are in the same LAN. That does not pose a problem to your case.
So, LAN setting, you need to pick a network where it takes effect.
Forum got its CG: How to Set Up Deep Packet Inspection(DPI) on Omada Router
- Copy Link
- Report Inappropriate Content
Information
Helpful: 0
Views: 666
Replies: 5
Voters 0
No one has voted for it yet.