Comfort Server Manager & vlans

[philcolley]

Hi

I have recently upgraded my home network to use the Unifi products and as part of this I have created separate VLANs with appropriate firewall rules for all my various devices ("Secure". "IOT", "Camera", "Guest" etc)

After I moved my two comfort ETH03 to the new IOT VLAN I can no longer access them with the Server Manager software. They are defiantly on the correct VLAN because the switch port enforces the VLAN and IP address. I can access both systems with the app through those IP addresses.

My main PC with "Configurator" is on the "Secure" VLAN so I have also tried a laptop which I can easily connect to the IOT VLAN so its the same as the ETH03 but it still wont see them. I have even changed the configuration of the IOT into the "Trusted Group" so there are no firewall rules interfering but still no good. I have checked the Firewall log and cant see anything about it being blocked. Have added Server Manager as an allowed app to the Windows Firewall.

I have seen mentioned of using Wireshark to look for packets but it appears you need to be an expert to know the filters etc necessary.

Any suggestions?
Phil

[Ingo]

Hi

I have recently upgraded my home network to use the Unifi products and as part of this I have created separate VLANs with appropriate firewall rules for all my various devices ("Secure". "IOT", "Camera", "Guest" etc)

After I moved my two comfort ETH03 to the new IOT VLAN I can no longer access them with the Server Manager software. They are defiantly on the correct VLAN because the switch port enforces the VLAN and IP address. I can access both systems with the app through those IP addresses.

My main PC with "Configurator" is on the "Secure" VLAN so I have also tried a laptop which I can easily connect to the IOT VLAN so its the same as the ETH03 but it still wont see them. I have even changed the configuration of the IOT into the "Trusted Group" so there are no firewall rules interfering but still no good. I have checked the Firewall log and cant see anything about it being blocked. Have added Server Manager as an allowed app to the Windows Firewall.

I have seen mentioned of using Wireshark to look for packets but it appears you need to be an expert to know the filters etc necessary.

Any suggestions?
Phil

Comfort Server Manager uses 'broadcast' discovery which is blocked by any routing device between vlan's. To get it to work you need to put your PC temporarily on the same Vlan as Comfort and when finished you move your PC back to the Vlan you want.

[philcolley]

Hi Ingo

Thanks for the reply. I did think something like that may have been going on so that's why I put Server manager on my laptop which could then easily be connected to the same IOT Vlan but it still didn't work.

Thought I've just has is that on my laptop I didn't do a full Configurator install I just copied over the Server manager, could I be missing support files for it to work properly?

Phil

[Ingo]

That should work. Just make sure you don't have your IOT network set to 'Isolated Network'. In an isolated network devices won't be able to 'see' each other on the same vlan, they can only talk to the default gateway. Whatever rules you have in place on the gateway is then also applied.

Edit: Apologies - I thought Isolated means isolated from each other in the same vlan but apparently Unify does it slightly different. from a quick search it seems devices are able to 'see' each other on the same vlan. Just disable it if you have it enabled as a test.

[slychiu]

This thread shows how to prioritise the network adaptor used by Comfort server manager to get the IP address if you have several network adaptors. It may work for you


http://www.comfortforums.com/thread-5806.html

[philcolley]

Thanks sorted it.

The Laptop had two old VMWare network adapters setup so I disabled those and when its connected to the IOT network it sees my two ETH03s

The PC only has the one network adapter and while its on a different VLan wont see the ETH03.

Swapping the PC onto the IOT VLan is more of a faff so will try that when I need to make a major config change as the laptop will do for now.

Thanks