Unifi flex mini 2.5gb - Messes up my Alta labs network

Hi,

I recently bought some Alta labs network gear.

I also bought a unifi flex mini 2.5g switch just to use as a unmanaged switch. It’s supposed to work as a unmanaged switch right out of the box.

When I connect it to my route10 when I have the s8 poe switch connected to route 10 it causes everything to go offline.

Even if I disconnect the flex mini, I still have to reset the router and s8 poe switch to get everything back up.

I have tried resetting the flex mini also.

I new to all this I was wondering if anyone has had similar issues, if there’s a easy solution.

Any assistance is appreciated thanks :slight_smile:

Just making sure.. no loops or anything right between the switches right? When you connect the unifi do you have an ssh into the route10? Does the route10 just start dropping pings immediately? Lastly if it’s got a “WAN” connection does it stop responding as well? Like passing traffic or anything?

1 Like

Just to confirm I understand the situation, you have the Flex Mini and S8 both plugged directly into Route10, and no interconnection directly between the Flex and S8?

This type of symptom is generally a STP problem of some sort. The Flex only supports the older RSTP, but generally speaking our modern MSTP implementation is backwards compatible with RSTP implementations, including UniFi’s. I have a USW Flex that doesn’t cause such issues, but the older 1G version, not the 2.5G. We’re picking up one of the 2.5G ones to see if that problem is reproducible. The part that doesn’t make sense is STP madness most always goes away and returns the network to a normal state just by unplugging the problem device.

A couple warnings on running UniFi equipment as unmanaged - first, that’s extremely dangerous security-wise. Factory default Ubiquiti equipment left running that way gets compromised very quickly if any malicious/compromised systems can reach it, the largest botnets in history have had huge numbers of Ubiquiti equipment in that state because it’s dead simple to compromise. Alta equipment does not suffer such problems as we don’t have default credentials that can be used to compromise factory default equipment. Also if you don’t adopt it to a UniFi controller, you can’t upgrade the firmware (very easily at least), and the factory-shipped firmware can be months to years out of date by the time you get it, potentially having since-resolved problems. So I would strongly advise you adopt it to a UniFi controller and upgrade its firmware for security and reliability reasons. That also allows you to configure things like STP priority if necessary.

Route10 itself does not currently participate in STP, it should be forwarding BPDUs across so the Flex and S8 talk between each other.

Two immediate suggestions/recommendations and we’ll follow up once we have a Flex 2.5G switch here. One, set the STP priority to something lower than default on the S8 so it’s the root bridge. Two, try plugging the Flex into the S8 rather than directly into Route10 if feasible, and see if that makes a difference. It shouldn’t be required of course, but it would be an interesting additional data point while we await getting a Flex 2.5G here.

2 Likes

Hi,

Thanks so much for the help. To clarify: both devices are connected directly to the Route10 with no interconnections between them.

I also tested connecting the Flex Mini to the S8 PoE, but that caused the entire network to go down as well. My plan was to run the Flex Mini as an unmanaged switch temporarily until I finish setting up my Proxmox server and UniFi Network Controller.

I tried yesterday adopting and updating the Flex Mini on my old router (flint 3) via my Home Assistant UniFi controller, but it refused to adopt. I can confirm the Flex Mini works fine when it is the only device connected to the Route10 during initial setup.

I’ll try tonight (so my gf wont complain :laughing: ) to set the STP priority to something lower. I’m new to this so I’m assuming you mean lower than 32768 so it has higher priority right?

This is for my home lab slowly working on it ; I moved to Alta Labs as an upgrade and deeper into network management.

A colleague at work introduced me to Alta Labs gear. It’s super nice networking gear. If you guys end up making a small 2.5g switch or a 2.5g s8 poe switch in the future. I will definitely swap it out for this Unifi one to make everything more unified and streamlined.

Thanks again!

Thanks for the help!

I forgot to say I’m new to all this.

There’s most likely a STP issue like you guys are saying . I will test tonight :slight_smile: .

I’ll set the the S8 Poe STP priority lower see if it sovles the issue.

Everything drops LAN I cant access the router or anything. The WAN on the route10 continues to blink though. Resetting the router and everything is only way to get network back up even if I unplug the Flex mini.

Yes lower than 32768 so it has higher priority to become root bridge. When everything is at default 32768, whichever switch happens to have the lowest MAC address becomes the root bridge. When you set one to a lower priority, it will become the root bridge instead.

The system logs on the S8 might have something telling, if you enable persistent logging under Settings, System, Advanced, Persistent Logging. Put something like 3 in the Switches box there. Then it’ll retain logs across reboots.

1 Like

Okay done, I enabled the logger in Advanced in system settings.

I set S8 stp to 4096 as the primary switch .

Connected my flex mini to the route 10 to L2 beside wan (w1) .

Everything seems to be running .

I’m assuming this mapping mean the S8 is managing the flex mini right?

Everything seems to be running fine full 2.5gbps through the switch.

Many thanks :slight_smile:

1 Like

Glad that worked. That doesn’t exactly mean the S8 is managing the Flex, just that it’s preventing the Flex from becoming the root bridge. Something very odd is happening when the Flex has root bridge status, which should recover as soon as it’s removed since that takes its BPDUs and any other potential impact it could have out of the equation, but it seems to be doing something that persists past its presence on the network. We’ll figure that out as soon as we get our hands on one, but you should be in good shape in the mean time.

2 Likes