Hi, the configuration of tunneled node for CX switches via Central UI groups seems very difficult/impossible to me.
Some obvious statements / requirements:
- Deploying infrastructrure should be as seemless as possible.
- Per site type there should be one group (no template UI group mix / mess)
- UI group is the preferred group type: GW and WLAN config is otherwise very difficult + most deployments don't have hundreds of sites so template groups are not preferred most of the time + customers prefer GUI.
- In order to deploy an environment we should configure as much as possible on group level for obvious reasons.
For CX switches the above is quite a challenge and needs a strict config flow to not loose the switch in the process. With a mix of group and device-level config, GUI and MultiEdit config it is possible to deploy them, without the need of a temporary template group or other 'workarounds'. Note: Why not allow the selection of a VLAN to get an IP address with DHCP and not only allow vlan1 as dhcp client?
However, for the configuration of UBT this seems quite impossible to me.
1. To define a local user role with tunneling via Central, UBT needs to be enabled -we want to define the user role on group level (of course!).
2. Te enable UBT we need a L3 source interface. On group level only port or LAG is possible. When creating such an interface (temp, because we'll use VLAN as source, which is only possible to configure at device level for an VLAN interface with fixed IP - DHCP vlan interface not selectable), there are errors when pushing the config to the switch.
3. So we cannot push an L3 interface config on group level to be used as source. So we cannot enable UBT. So we cannot define the local user roles on group level.
If we would be able to enable UBT on group level without the need for a L3 source interface I think the issue would we solved and/or allow the selection of a VLAN as L3 source interface on group level without the check whether it has an IP (not possible on group level). It would be up to us then to configure the rest at device level to make it work, but at least we would be able to deploy UBT on CX switches in a reasonable manner.
Does anyone have found a way to make it work? Have I missed something?
------------------------------
Best Regards
Neo
------------------------------