Ubiquiti Edgerouter Tutorial

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Ubiquiti Edgerouter Tutorial

1 | ... | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | ... | 42

Mr Snotty
8869 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

# 1951272 3-Feb-2018 23:25

@fe31nz I have a UNMS server that does that for me however in this case it was due to me clearing my personal information off it since he got my old Edgerouter Lite. Not to worry, made a new Edgerouter USB stick image and reloaded the whole thing.

normanc

9 posts

Wannabe Geek

# 1951290 4-Feb-2018 08:30

Forgive me if the answer is somewhere in the topic replies. I can't figure out if it's possible to search in a single topic.

Anyway, I just got an Edgerouter X SFP (because I wanted a better router than the one that came with my FibreX plan) and so far it's been great. Works FAR better than the Vodafone supplied one.

And thanks to this thread for configuration help.

But I wanted to know about QoS configuration.

Is there a simple way in EdgeOS to set up a rule for Skype or Zoom priority. Video streaming etc?

I'm not at all familiar with setting up QoS.

Happy to be pointed at a specific tutorial or whatever...

Thanks,

michaelmurfy

Mr Snotty
8869 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

# 1951303 4-Feb-2018 09:45

@normanc Don't use QoS, you don't need to and it'll disable offloading making your internet slower in the process.

normanc

9 posts

Wannabe Geek

# 1951327 4-Feb-2018 11:32

Ah interesting. I thought that QoS was a good idea to make sure that certain traffic types are more reliable?

Or are the systems onboard the router good enough to do it automatically?

Speaking of "offloading" I tried running the command in your first post:

show ubnt offload

and it gave some comments about:

IPSec offload module: not loaded

HWNAT offload module: not loaded

-------

PLus some other lines about traffic analysis. (I haven't copied them in here because I can't seem to copy out of the CLI. Or paste into it, which is annoying.)

Does this indicate a problem....?

My speed test shows me the speeds I would expect based on my plan...

Thanks for your help

michaelmurfy

Mr Snotty
8869 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

# 1951335 4-Feb-2018 12:12

One person supports this post

There is only really need for QoS if you're on a low speed plan (eg, ADSL or Satellite) and have bandwidth constraints. Even then, QoS was never really any good at preventing problems due to this. You don't have HWNAT turned on so may be best to remove QoS and enable it (via Terminal) - it is highly unlikely you'll need QoS these days:

configure
set system offload hwnat enable
commit
save

6FIEND

774 posts

Ultimate Geek
Inactive user

# 1951838 5-Feb-2018 10:29

Hi,

I'm looking to purchase an EdgeRouter PoE (my first "grown up" router) for use with my Unifi AP.

Would you mind letting me know if I can utilise all eth ports on the same subnet?

Eg.

...or if there is any restriction in doing this?

EDIT: Or would I be better to opt for an ER Lite (or similar) and a separate switch?

michaelmurfy

Mr Snotty
8869 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

# 1951845 5-Feb-2018 10:36

@6FIEND

eth0 - to ONT
eth1 - Unused as it isn't part of the switch group.
eth2 - To Switch (Grab a cheap 8pt Switch)
eth3-4 - To Access Point(s).

Don't enable bridging between eth1 and the switch0 interface as you'll get a massive performance hit (this is not offloaded). The switch interface only covers eth2-4. Use a cheap Gigabit switch instead if you need extra ports. Essentially from here it means your outbound interface is eth0 and your inside interface is switch0.

6FIEND

774 posts

Ultimate Geek
Inactive user

# 1951850 5-Feb-2018 10:42

Many thanks!

sudo

178 posts

Master Geek

# 1951877 5-Feb-2018 11:03

Does anyone know how to assign a physical port on an Edgerouter (ER-X) to be on a specific network?

I have configured a separate network (192.168.5.x) for my kids devices.

These are connected via a separate WLAN, but my son has set up a new gaming PC that I have connected via ethernet to a port on the ER-X.

This is currently picking up a DHCP address from the main network.

Manually configuring an IP is not an option as my son will just change it when it suits him, and I noticed his MAC addresses are not real e.g. 12:31:23:12:31:23.

michaelmurfy

Mr Snotty
8869 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

# 1951983 5-Feb-2018 13:29

If he has physical access to the Edgerouter this won't work either but ideally you'd want to just put the port in another IP range (eg, 10.0.0.1/24), have a DHCP server listening on that IP range and port and firewall the crap out of it so he can't escape.

dfnt

defiant
998 posts

Ultimate Geek

Lifetime subscriber

# 1952081 5-Feb-2018 16:48

One person supports this post

@michaelmurfy

Lollies!

michaelmurfy

Mr Snotty
8869 posts

Uber Geek

Moderator

Trusted

Lifetime subscriber

# 1952082 5-Feb-2018 16:49

@nas Damn, this isn't a competition now!

dfnt

defiant
998 posts

Ultimate Geek

Lifetime subscriber

# 1952085 5-Feb-2018 17:01

Haha, as long as everyone doesn’t go to them wanting lollies or they’ll run out!

normanc

9 posts

Wannabe Geek

# 1960346 19-Feb-2018 13:39

Question about external access to my Edgerouter

I have an Edgerouter SPF

I'm on Vodafone FibreX and have a DDNS set up.

If I browse to my DDNS, it takes me straight to the web interface of the Edgerouter.

In the Edgerouter, I don't have any port forwarding for port 80.

So clearly it's capturing the http request and serving the internal web server.

I really think this is a security problem.

I'm sure there's a way of stopping it doing this, and keeping the EdgeOS interface for inside my network...

But I'm really not sure how to do it.

Thanks!

fe31nz

480 posts

Ultimate Geek

# 1960514 19-Feb-2018 18:42

One person supports this post

What exactly do you mean by "Browse to my DDNS"? How are you doing that? From inside or outside your home network? If you do it from inside, it may well work, depending on how your router is set up, as the router is able to turn around packets on the WAN interface and send them back into the router, if you have "Hairpin NAT" (aka "NAT reflection" or "NAT loopback" or "NAT on a stick") enabled. For it to be a problem, you have to be able to do it from the outside - so try using your phone on its data connection (WiFi off) and see if it works from there.

If you have not set up port forwarding, the only way it would work from the outside is if you are not using NAT on your WAN port - which would give you all sorts of other problems.

1 | ... | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | ... | 42