https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/onbarding-x435-8p-via-multiple-vlans-subnets-fails/m-p/95555#M9826 <P>We have multiple sites where site connectivity is provided over third party managed infrastructure providing multiple VRFs/VLANs and subnets over a single uplink.</P><P>Typically there is an internally facing VLAN and Subnet with access to internal DNS, DHCP and hence XIQ-SE plus an externally facing VLAN and subnet for public use with no access to internal DNS and no access to XIQ-SE. This has access to externally hosted DHCP and public DNS.</P><P>When onboarding X435-8P switches 'out of the box' they pick up addresses on both VLANs. We were under the impression that the switch should try each until a connection to XIQ-SE is established. However, traceroute from the switch shows that this is being restricted to just the public interface - hence not only can the address of our XIQ-SE server not be determined as there is no access to internal DNS but also the server itself is inaccessible anyway.<BR /><BR />Connecting to an intermediate device to filter out Public access gives us a workaround - but won't always be possible. Nor will disabling the Public DHCP be an option as that would interrupt access to vital public services.<BR /><BR />Switches come 'out of the box' with OS&nbsp;31.7.1.4 patch1-77<BR /><BR /></P> Wed, 19 Apr 2023 15:46:59 GMT NCC 2023-04-19T15:46:59Z https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/onbarding-x435-8p-via-multiple-vlans-subnets-fails/m-p/95555#M9826 <P>We have multiple sites where site connectivity is provided over third party managed infrastructure providing multiple VRFs/VLANs and subnets over a single uplink.</P><P>Typically there is an internally facing VLAN and Subnet with access to internal DNS, DHCP and hence XIQ-SE plus an externally facing VLAN and subnet for public use with no access to internal DNS and no access to XIQ-SE. This has access to externally hosted DHCP and public DNS.</P><P>When onboarding X435-8P switches 'out of the box' they pick up addresses on both VLANs. We were under the impression that the switch should try each until a connection to XIQ-SE is established. However, traceroute from the switch shows that this is being restricted to just the public interface - hence not only can the address of our XIQ-SE server not be determined as there is no access to internal DNS but also the server itself is inaccessible anyway.<BR /><BR />Connecting to an intermediate device to filter out Public access gives us a workaround - but won't always be possible. Nor will disabling the Public DHCP be an option as that would interrupt access to vital public services.<BR /><BR />Switches come 'out of the box' with OS&nbsp;31.7.1.4 patch1-77<BR /><BR /></P> Wed, 19 Apr 2023 15:46:59 GMT https://community.extremenetworks.com/t5/extremecloud-iq-site-engine/onbarding-x435-8p-via-multiple-vlans-subnets-fails/m-p/95555#M9826 NCC 2023-04-19T15:46:59Z