This is another great reason why your management should be separate from your customer traffic. You should be managing your CPE's either untagged and their internet data tagged (this is what we do) or in more simple cases, tagged management and untagged data. I would never let a management IP be set by DHCP (even for the CPE) but the customer router (or CPE in router mode) get's it's public IP via DHCP. (over a tagged vlan)
I know many people who are doing it, I know it works but if the only way you access the CPE is by the same address the customer uses to get internet access, thats a huge security risk to your network. Additionally if you're using public IP's to manage your CPE's that's an even larger risk unless you are taking care to do some hefty filtering at the edge of the network. Even then your customers could still get to each other. Take the time to design your network so that you know exactly where and who has access to what. On Sun, Aug 20, 2017 at 12:32 AM, CBB - Jay Fuller < par...@cyberbroadband.net> wrote: > > The fallback ip was only received after the DHCP request failed - but > since each radio had the "default ip" they were all on the same ip > > > ----- Original Message ----- > *From:* Jan Van Kort <j.vank...@oregononline.net> > *To:* ubnt_users@wispa.org > *Sent:* Saturday, August 19, 2017 7:56 PM > *Subject:* Re: [Ubnt_users] duplicate IPs > > Understanding what you're saying is: each radio gets a unique "fall-back" > IP as well as a unique regular IP? > > On 08/18/2017 05:54 PM, CBB - Jay Fuller wrote: > > > We had an issue not long ago where we were doing DHCP on a network and it > was not being passed from router to router. > The result was a whole bunch of radios going to the default fallback > address which was - you guessed it - the same IP. > Fortunately this was about 15 radios. > > I actually wound up plugging directly into the network segment (switch) > and changing each radios default management IP > manually. This was actually a network conversion moving from pppoe to > DHCP (from their billing server to ours). The > fallback IP is only an IP - no subnet, no gateway, so I basically picked a > number in their existing legacy subnet that I did > not think was being used (something like .70) and put the first radio on > .71...second on .72...and so on. > > When it came time to switch them all to DHCP after the conversion it was > pretty easy - but this took a while to do (obviously) > I'd change one radio, then keep hitting fresh until the next radio came > up. Sometimes I'd get a different radio with each refresh. > But - eventually - they were all changed and no radios were on the > "initial" fallback ip anymore and - problem solved. > > I went to the steakhouse in the town and bought a steak :) > > > > > ----- Original Message ----- > *From:* Christian Palecek <christ...@cybernet1.com> > *To:* Ubiquiti Users Group <ubnt_users@wispa.org> > *Sent:* Friday, August 18, 2017 5:18 PM > *Subject:* Re: [Ubnt_users] duplicate IPs > > How are you handing out ips? Are the duplicates in the same segment? What > type of router is on the headend? > > > > Sent from my Verizon, Samsung Galaxy smartphone > > -------- Original message -------- > From: Adair Winter <ada...@amarillowireless.net> > Date: 8/18/17 4:02 PM (GMT-07:00) > To: Ubiquiti Users Group <ubnt_users@wispa.org> > Subject: Re: [Ubnt_users] duplicate IPs > > er,... ip addresses > > On Fri, Aug 18, 2017 at 5:01 PM, Jan-OOLLC <j.vank...@oregononline.net> > wrote: > >> discovery tool (ubnt) did not find it, Dude discovery tool, ditto. I had >> to guess which device one of them might be, change the ip and then voila, >> discovery with dude found a new device which was another nsm2 with same >> ip. I need something that works without having to guess. >> >> Jan V >> >> On 08/18/2017 02:35 PM, Adair Winter wrote: >> >> Discovery tool? >> >> On Fri, Aug 18, 2017 at 4:23 PM, Jan-OOLLC <j.vank...@oregononline.net> >> wrote: >> >>> ubnt specific. What can be done to locate duplicate IP addresses. Are >>> there any applications that do this? >>> >>> Jan V >>> >>> On 08/18/2017 12:23 PM, Josh Luthman wrote: >>> >>> Like Ubnt specific? Not sure what the question is. >>> >>> Josh Luthman >>> Office: 937-552-2340 <%28937%29%20552-2340> >>> Direct: 937-552-2343 <%28937%29%20552-2343> >>> 1100 Wayne St >>> Suite 1337 >>> Troy, OH 45373 >>> >>> On Aug 18, 2017 3:21 PM, "Jan-OOLLC" <j.vank...@oregononline.net> wrote: >>> >>>> Anyone ever dealt with this? >>>> >>>> -- >>>> >>>> Jan V >>>> >>>> >>>> _______________________________________________ >>>> Ubnt_users mailing list >>>> Ubnt_users@wispa.org >>>> http://lists.wispa.org/mailman/listinfo/ubnt_users >>>> >>> >>> >>> _______________________________________________ >>> Ubnt_users mailing >>> listUbnt_users@wispa.orghttp://lists.wispa.org/mailman/listinfo/ubnt_users >>> >>> >>> >>> _______________________________________________ >>> Ubnt_users mailing list >>> Ubnt_users@wispa.org >>> http://lists.wispa.org/mailman/listinfo/ubnt_users >>> >>> >> >> >> -- >> >> Adair Winter >> VP, Network Operations / Co-Owner >> Amarillo Wireless | 806.316.5071 <%28806%29%20316-5071> >> C: 806.231.7180 <%28806%29%20231-7180> >> http://www.amarillowireless.net >> <http://www.amarillowireless.net> >> >> >> >> >> _______________________________________________ >> Ubnt_users mailing >> listUbnt_users@wispa.orghttp://lists.wispa.org/mailman/listinfo/ubnt_users >> >> >> >> _______________________________________________ >> Ubnt_users mailing list >> Ubnt_users@wispa.org >> http://lists.wispa.org/mailman/listinfo/ubnt_users >> >> > > > -- > > Adair Winter > VP, Network Operations / Co-Owner > Amarillo Wireless | 806.316.5071 <(806)%20316-5071> > C: 806.231.7180 <(806)%20231-7180> > http://www.amarillowireless.net > <http://www.amarillowireless.net> > > > ------------------------------ > _______________________________________________ > Ubnt_users mailing list > Ubnt_users@wispa.org > http://lists.wispa.org/mailman/listinfo/ubnt_users > > > > _______________________________________________ > Ubnt_users mailing > listUbnt_users@wispa.orghttp://lists.wispa.org/mailman/listinfo/ubnt_users > > > ------------------------------ > > _______________________________________________ > Ubnt_users mailing list > Ubnt_users@wispa.org > http://lists.wispa.org/mailman/listinfo/ubnt_users > > > _______________________________________________ > Ubnt_users mailing list > Ubnt_users@wispa.org > http://lists.wispa.org/mailman/listinfo/ubnt_users > > -- Adair Winter VP, Network Operations / Co-Owner Amarillo Wireless | 806.316.5071 C: 806.231.7180 http://www.amarillowireless.net <http://www.amarillowireless.net>
_______________________________________________ Ubnt_users mailing list Ubnt_users@wispa.org http://lists.wispa.org/mailman/listinfo/ubnt_users
