EdgeRouter Lite or Security Gateway for Bigpipe UFB

Forums › Spark New Zealand (including Skinny and BigPipe) › EdgeRouter Lite or Security Gateway for Bigpipe UFB

timbosan

2159 posts

Uber Geek

#171977 7-May-2015 14:59

Hi All,

Next week I get UFB installed (yah!) and I am now considering what router to use. Originally I was going to use my Untangle server, as that can do PPPoE on the WAN interface, but it is not recommended due to some of the modules not supporting PPPoE. So I am looking for a box to handle the PPPoE login, then use Untangle between that and the rest of the LAN (and whilst I can configure the Untangle box as a router, I will probably leave it in bridge mode and set the router to router mode instead of putting it in bridge mode).

So: ONT -> Router -> Untangle -> Switch -> LAN

I already have a Unfi Access Point so I don't want a box with built in WiFi, but as I understand it, the Security Gateway stills needs the Controller software, correct? Isn't there a piece of Ubiquiti hardware that integrates the controller software?

And is there much difference, if any, between the EdgeRouter Lite and the Security Gateway (apart from the second LAN port on the former)? They seem to have the same specs internally, use the same CLI commands, etc. Prices are close too - $150 vs $200.

FYI I am going on the 200/200 plan, not that I am worried about either choice handling that.

So recommendations anyone? Or is there something else I haven't come across yet that may suit?

1 | 2

2844 posts

Uber Geek

#1299952 7-May-2015 15:38

The main distinction between the EdgeRouter Lite and UniFi Security Gateway is how they are managed. The USG is managed via the Controller software, while the EdgeRouter has it's own Web interfaces.

I never did work out what the other differences were, but I do recall there was a bug (or feature), where the command line settings on the USG were over-written by the Controller, and given the limited features of the GUI, meant additional steps needed to be taken to ensure they persisted. The EdgeRouter Lite is a more mature product, so I'd expect fewer hassles with that route.

A general comment though, the EdgeRouter Lite isn't the easiest thing in the world to configure. I'm absolutely certain if I had to make changes to it all the time, I would love the CLI, but as something I change rarely, the sparse documentation makes it a little frustrating to work with. Other than that, it works great on BigPipe (200/20).

timbosan

2159 posts

Uber Geek

#1299962 7-May-2015 15:46

SirHumphreyAppleby - what did you have to configure, apart from PPPoe details, for BigPipe? I would have thought there was nothing more to configure, as BigPipe doesn't require VLAN tagging, and I don't need VPN configured, so what's left?

SirHumphreyAppleby

2844 posts

Uber Geek

#1299968 7-May-2015 16:00

timbosan: SirHumphreyAppleby - what did you have to configure, apart from PPPoe details, for BigPipe? I would have thought there was nothing more to configure, as BigPipe doesn't require VLAN tagging, and I don't need VPN configured, so what's left?

There is a wizard for the basic setup. If you don't need any of the above, then it's probably all you need to run. If you needed VLAN tagging like I do, then you'd have to do it manually via the GUI, but it's quite easy.

My setup was more complex, replacing much of the functionality of a pfSense box (no fan noise). I needed to use the CLI to configure things like a static tunnels and router advertisements for IPv6.

timbosan

2159 posts

Uber Geek

#1300000 7-May-2015 16:19

Did you have to VLAN tag for VOIP? I have VOIP but thought it might work without the VLAN tags

Sideface

9351 posts

Uber Geek

Trusted

Lifetime subscriber

#1300003 7-May-2015 16:27

SirHumphreyAppleby: ... A general comment though, the EdgeRouter Lite isn't the easiest thing in the world to configure. I'm absolutely certain if I had to make changes to it all the time, I would love the CLI, but as something I change rarely, the sparse documentation makes it a little frustrating to work with. Other than that, it works great on BigPipe (200/20).

+1

I'm using an EdgeRouter Lite - it was a swine to set up, and I hope that I never have to change any settings.
Documentation is minimal, to put it politely.
It works very well and is FAST.

Sideface

SirHumphreyAppleby

2844 posts

Uber Geek

#1300004 7-May-2015 16:30

timbosan: Did you have to VLAN tag for VOIP? I have VOIP but thought it might work without the VLAN tags

No, VLAN tagging isn't required for VoIP. Your third party VoIP service will work just fine without it.

timbosan

2159 posts

Uber Geek

#1300005 7-May-2015 16:32

To those that have the EdgeRouter, how long ago did you get it? Isn't the latest 1.6 firmware supposed to make setup (for basic SOHO installs) a lot easier?

Equinox IT

Cloud spending continues to surge globally, but most organisations haven’t made the changes necessary to maximise the value and cost-efficiency benefits of their cloud investments. Download the whitepaper From Overspend to Advantage now.

SirHumphreyAppleby

2844 posts

Uber Geek

#1300008 7-May-2015 16:36

timbosan: To those that have the EdgeRouter, how long ago did you get it? Isn't the latest 1.6 firmware supposed to make setup (for basic SOHO installs) a lot easier?

It was out of stock when I went on to UFB originally, so I only got mine about six months ago when the fan failed in my pfSense box. I've run 1.6 from new, and while it has improved over older releases, it's nowhere near as friendly as a router targeted at consumers. It can do a lot more of course, just don't expect it to be well documented.

timbosan

2159 posts

Uber Geek

#1300074 7-May-2015 18:59

So, if I was to look at another product, what would be recommended? Remember I am not after a unit, just a router, and it needs to handle at least 200/200 (bonus if it can support 1gps)

SirHumphreyAppleby

2844 posts

Uber Geek

#1300076 7-May-2015 19:05

timbosan: So, if I was to look at another product, what would be recommended? Remember I am not after a unit, just a router, and it needs to handle at least 200/200 (bonus if it can support 1gps)

Despite what my comments may have implied, I do actually recommend the EdgeRouter Lite. You just need to be aware that it has a few rough edges and isn't well documented.

The EdgeRouter Lite will do 200/200 PPPoE no problem with hardware checksum offloading enabled.

chevrolux

4962 posts

Uber Geek
Inactive user

#1300141 7-May-2015 20:09

I'm going to be extremely unhelpful and say don't bother with any of the UBNT routers.

Mikrotik's RouterOS is far far better than ubnt's software. It is far more mature and has many more features. Also, everything is able to be done in Winbox rather than on the cli. Last time I used a edgerouter I had to use the cli just to put a ppp interface on a vlan!

Mikrotik hardware is better too. For the same price as a edgerouter you will get the rb951g-2hnd which will give 5 gigabit interfaces, a wireless interface and a usb port.

chevrolux

4962 posts

Uber Geek
Inactive user

#1300143 7-May-2015 20:12

oooo sorry. Just re-read you need to do 200/200 pppoe. For this you want the RB850Gx2 which has 5 gigabit ports but no wireless. It does have a dual core cpu though.

Sideface

9351 posts

Uber Geek

Trusted

Lifetime subscriber

#1300248 7-May-2015 22:08

timbosan: To those that have the EdgeRouter, how long ago did you get it? Isn't the latest 1.6 firmware supposed to make setup (for basic SOHO installs) a lot easier?

Lies, all lies

I'm using firmware 1.6.
Setup is NOT easy.

Sideface

timbosan

2159 posts

Uber Geek

#1300378 8-May-2015 08:41

chevrolux: I'm going to be extremely unhelpful and say don't bother with any of the UBNT routers.

Mikrotik's RouterOS is far far better than ubnt's software. It is far more mature and has many more features. Also, everything is able to be done in Winbox rather than on the cli. Last time I used a edgerouter I had to use the cli just to put a ppp interface on a vlan!

Mikrotik hardware is better too. For the same price as a edgerouter you will get the rb951g-2hnd which will give 5 gigabit interfaces, a wireless interface and a usb port.

Yeah, I have seen these discussed a bit on geekzone, and there is a setup guide from michealmurphy for a RB951G. They seem (ignoring the setup) to perform as well as the EdgeRouters, but easier to setup.

Does anyone know if the other models such as RouterBoard RB2011UiAS-RM or the RouterBoard RB2011iL-IN will work on UFB? I like the fact they are rack mount!

nitrotech

1285 posts

Uber Geek

#1300525 8-May-2015 10:39

timbosan:
chevrolux: I'm going to be extremely unhelpful and say don't bother with any of the UBNT routers.

Mikrotik's RouterOS is far far better than ubnt's software. It is far more mature and has many more features. Also, everything is able to be done in Winbox rather than on the cli. Last time I used a edgerouter I had to use the cli just to put a ppp interface on a vlan!

Mikrotik hardware is better too. For the same price as a edgerouter you will get the rb951g-2hnd which will give 5 gigabit interfaces, a wireless interface and a usb port.

Yeah, I have seen these discussed a bit on geekzone, and there is a setup guide from michealmurphy for a RB951G. They seem (ignoring the setup) to perform as well as the EdgeRouters, but easier to setup.

Does anyone know if the other models such as RouterBoard RB2011UiAS-RM or the RouterBoard RB2011iL-IN will work on UFB? I like the fact they are rack mount!

Works fine on UFB - we have a 200/200 connection and a 100/50 connection on it however note the 2011 series only has a 600mhz single core cpu - 200mbps maxes the CPU out as suggested above get an 850 with a rack mount faceplate.

1 | 2