{"id":1155,"date":"2023-09-03T19:03:28","date_gmt":"2023-09-04T00:03:28","guid":{"rendered":"http:\/\/darthjedi.logiodice.com\/?p=1155"},"modified":"2023-12-17T21:58:41","modified_gmt":"2023-12-18T02:58:41","slug":"palo-alto-and-unifi","status":"publish","type":"post","link":"https:\/\/darthjedi.logiodice.com\/?p=1155","title":{"rendered":"Palo Alto and Unifi"},"content":{"rendered":"\n

I.e. Adventures in Networking<\/p>\n\n\n\n

I don’t have a lot to say right now, other than I spent *hours* trying to get my new Palo Alto to work with the Unifi Suite. <\/p>\n\n\n\n

Little did I realize that Unifi’s concept of “Native VLAN” means it is going to strip the VLAN tag of the “Native VLAN” off the 1Q header, and the Palo Alto doesn’t have a concept of the “Native VLAN” which means, when it gets an untagged packet it sends it to the primary interface (not any of the sub-interfaces).<\/p>\n\n\n\n

The fix:
– Create a Network Profile that has no native VLAN and tag the VLAN specifically destined for the Palo Interface.<\/p>\n\n\n\n

I’m dropping this note here, b\/c I could not find ANYWHERE on the internet that explained this, I had to piece it together based on lots of different documents around how Unifi, Cisco, Palo, etc. work.<\/p>\n\n\n\n

Plus, I’ll probably forget this next week when I go to try and configure my next interface.<\/p>\n\n\n\n

09\/24\/2023 – Also found out the hard way that the IP addresses set on the interfaces themselves have to have a net mask added, or apparently they consider themselves in a network all to themselves, and won’t route traffic. I think, after troubleshooting, I realized that it is because this is acting both as the IP of the interfaces, and the gateway address for the interface. <\/p>\n\n\n\n

At least I can happily say …. it wasn’t DNS!<\/p>\n\n\n\n

\"Angry<\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"

I.e. Adventures in Networking I don’t have a lot to say right now, other than I spent *hours* trying to get my new Palo Alto to work with the Unifi Suite. Little did I realize that Unifi’s concept of “Native VLAN” means it is going to strip the VLAN tag of the “Native VLAN” off … Continue reading “Palo Alto and Unifi”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":1156,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[25,28],"tags":[68],"class_list":["post-1155","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","category-technology","tag-networking"],"jetpack_featured_media_url":"https:\/\/darthjedi.logiodice.com\/wp-content\/uploads\/2023\/09\/czNmcy1wcml2YXRlL3Jhd3BpeGVsX2ltYWdlcy93ZWJzaXRlX2NvbnRlbnQvam9iNjcwLTAxNTktcC1sMWJpemM1Yi5wbmc.png","jetpack_sharing_enabled":true,"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/darthjedi.logiodice.com\/index.php?rest_route=\/wp\/v2\/posts\/1155","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/darthjedi.logiodice.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/darthjedi.logiodice.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/darthjedi.logiodice.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/darthjedi.logiodice.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1155"}],"version-history":[{"count":5,"href":"https:\/\/darthjedi.logiodice.com\/index.php?rest_route=\/wp\/v2\/posts\/1155\/revisions"}],"predecessor-version":[{"id":1183,"href":"https:\/\/darthjedi.logiodice.com\/index.php?rest_route=\/wp\/v2\/posts\/1155\/revisions\/1183"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/darthjedi.logiodice.com\/index.php?rest_route=\/wp\/v2\/media\/1156"}],"wp:attachment":[{"href":"https:\/\/darthjedi.logiodice.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1155"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/darthjedi.logiodice.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1155"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/darthjedi.logiodice.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1155"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}