Ubiquiti Edgerouter Tutorial

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Ubiquiti Edgerouter Tutorial

1 | ... | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | ... | 57

3384 posts

Uber Geek
+1 received by user: 1023

Trusted

#2054412 11-Jul-2018 16:19

Suggest use an IPv6 speed test to see which combo works better..

http://www.speedtest6.com/ but not sure of the back end being able to support gig speeds..

CPU: AMD 5900x | RAM: GSKILL Trident Z Neo RGB F4-3600C16D-32GTZNC-32-GB | MB: Asus X570-E | GFX: EVGA FTW3 Ultra RTX 3080Ti| Monitor: LG 27GL850-B 2560x1440

Quic: https://account.quic.nz/refer/473833 R473833EQKIBX

freakngeek

356 posts

Ultimate Geek
+1 received by user: 123

#2055576 13-Jul-2018 09:32

New EdgeRouter firmware 2.0.0-alpha.2 has been released by UBNT-afomins Tuesday - last edited Wednesday

New alpha release 2.0.0-alpha.2 is available here:

ER-X, ER-X-SFP and EP-R6: v2.0.0-alpha.2 is not available for Mediatek-based routers. Please wait for 2.0.0-alpha.3
(SHA256:n/a)
ERLite-3 and ERPoe-5: https://dl.ubnt.com/firmwares/edgemax/v2.0.x/ER-e100.v2.0.0-alpha.2.5102597.tar
(SHA256:17e5d3ba8bbb7398f9f3a090769faf1b31cad29d0797a34d6eea06bf73e448dc)

ER-8, ERPro-8 and EP-R8: https://dl.ubnt.com/firmwares/edgemax/v2.0.x/ER-e200.v2.0.0-alpha.2.5102626.tar
(SHA256:7908e244c630ff10a0db94b43640080c6e0d389975df0e13cd6794b289a28a0d)

ER-4, ER-6P and ER-12: https://dl.ubnt.com/firmwares/edgemax/v2.0.x/ER-e300.v2.0.0-alpha.2.5102611.tar
(SHA256:7893fabf706f6f87c658deaa867c87a890c27b9b6c4f6d52c57dde80c08acca1)

ER-8-XG: https://dl.ubnt.com/firmwares/edgemax/v2.0.x/ER-e1000.v2.0.0-alpha.2.5102597.tar
(SHA256:2f79af836b06ee00bc447f77e5e9e3028d742400ce5a614ef9e9a188ad932414)

Note: The ER-X/ER-X-SFP/EP-R6 has more limited storage, and in some cases, an upgrade may fail due to not enough space. If this happens, remove the old backup image first (using "delete system image" command, see here for more details) before doing an upgrade.

More details can be found in the release notes below. Please give it a try if you are interested in the new features/changes to help us test them so that we can get the release out sooner! Thanks very much!

[Release Notes v2.0.0-alpha.2]

Changelog

Changes since v2.0.0-alpha.1

New features:

Enhancements and bug fixes:

[WebGUI] - Fix regression in 2.0.0-alpha.1 when DynDNS configuration from WebGUI failed. Discussed here
[WebGUI] - Fix regression in 2.0.0-alpha.1 when Port-Forwarding configuration from WebGUI failed. Discussed here
[WebGUI] - Fix regression in 2.0.0-alpha.1 when QOS configuration from WebGUI failed. Discussed here
[WebGUI] - Fix bug when remote shell code could be executed when configuring static-lease from WebGUI
[WebGUI] - Fix bug when bridge interface could not be configured in WebGUI. Discussed here
[WebGUI] - Fix regression in 2.0.0-alpha.1 when error was displayed when doing reboot from WebGUI
[WebGUI] - Fix regression in 2.0.0-alpha.1 when CLI window was not functioning
[WebGUI] - Fix regression in 2.0.0-alpha.1 when WebGUI login failed unless clearing cookies
[WebGUI] - Sort wizards' list alphabetically
[Interface] - Fixed random bug when interface stopped passing traffic after changing speed/duplex
[Interface] - Fixed bug when eth0 speed/duplex could not be changed on ER-Infinity
[BGP] - Fix "Commit failed" error when setting BGP neighbour configuration. Discussed here
[DynDNS] - upgraded "ddlient" to support cloudflare v4 API. Discussed here
[iperf] - Add missing "iperf" package
[System] - Fixed bug when PoE status was not reset when doing "factory-reset"
[System] - Fix bug when SFP module was causing error message spam in syslog. Discussed here
[System] - Fix "Permission denied" error when setting "system packaet-rx-core-num". Discussed here
[System] - Fix regression in 2.0.0-alpha.1 when routing daemon were not restored after killing them with SIGTERM
[System] - Fix regression in 2.0.0-alpha.1 when scripts from `/config/post-config.d/` were ignored during boot. Discussed here
[POE] - Keep POE status during reset for ER-X-SFP/EP-R6/EP-R8/ER-12 devices
[FAN] - Improve fan logic for ER-Infinity
[OpenVPN] - Fix regression in 2.0.0-alpha.1 when OpenVPN server configuration failed during commit. Discussed here
[SSH-recovery] - Fix regression in 2.0.0-alpha.1 when "ssh-recovery" was not functioning after boot
[NTP] - Fix regression in 2.0.0-alpha.1 NTP service failed not start during boot
[OSPF] - Fix regression in 2.0.0-alpha.1 when "delete protocols ospf" failed. Discussed here
[Offload] - Fix regression in 2.0.0-alpha.1 when "system offload ipsec enable" caused commit failure. Discussed here
[NTP] - Fix regression in 2.0.0-alpha.1 when commit failed when setting timezone. Discussed here

Known issues:

Configuration gets corrupted when deleting DHCP server via UNMS on ER-12
IPsec offloading does not work
VTI-based VPN does not work

Updated software components:

Tinkerisk

4800 posts

Uber Geek
+1 received by user: 3660

#2061879 24-Jul-2018 18:37

michaelmurfy:

I also found I had MSS clamping enabled;

Not sure why I had this enabled in the first place as it would have been limiting things for me.

IPv4 'firewall options mss-clamp mss 1412' has been infiltrated by running the WAN+2LAN2 wizard.

With a MTU of 1492, MSS clamping should be 1452 instead of 1412 (IPv4).

Qui nihil scit, omnia credere debet.
Firewalls do NOT stop dragons.
In effect we have everything to hide from someone, and no idea who someone is.

Jedi

13 posts

Geek

#2070323 8-Aug-2018 22:34

Hi All,

I am currently managing my network with a Tp-Link Archer VR2800. I updated the firmware so I can use it with Spark fibre.

I am wanting a separate network so have purchased an Edgerouter PoE, updated to the latest firmware and ran the WAN+2LAN2 wizard.

I am wanting to retain the Tp-Link as the router for my current network because:

1) I have everything configured how I want it, static IP addresses set and the relevant ports opened for my web and email server I am running on Ubuntu Server 18-04. I would prefer not to have to start again with a new router.

2) I am familiar with the GUI, I know how everything works

3) I can utilise the wi-fi

After reading through all 23 pages of this thread I found this:

"Disable DHCP, set its IP on one that doesn't conflict with anything else, plug it into a general Ethernet port (not WAN) and you're away."

Alas no.

I disabled the DHCP (although I do not know why I would want to do this if I want the router to manage the network) set the IP address to 192.168.3.1 which is not being used and plugged it into eth3.

The internet LED on the Tp-Link is orange which according to the manual means "Internet connection is correct but internet service is unavailable". I feel I am only one setting away but dont know if its a Edgerouter setting or Tp-Link setting.

Before I go running off and posting in a Tp-Link forum I just want to be sure the Edgerouter has been configured correctly for what I am trying to do.

Thank you for your help.

Tinkerisk

4800 posts

Uber Geek
+1 received by user: 3660

#2070351 9-Aug-2018 06:24

Jedi:

After reading through all 23 pages of this thread I found this:

"Disable DHCP, set its IP on one that doesn't conflict with anything else, plug it into a general Ethernet port (not WAN) and you're away."

Alas no.

I disabled the DHCP (although I do not know why I would want to do this if I want the router to manage the network) set the IP address to 192.168.3.1 which is not being used and plugged it into eth3.

I feel I am only one setting away but dont know if its a Edgerouter setting or Tp-Link setting.

Before I go running off and posting in a Tp-Link forum I just want to be sure the Edgerouter has been configured correctly for what I am trying to do.

If you like to keep all archer stuff, you'll need to have an additional Modem/ONT and the EdgeRouter. You need to disable the DHCP of the Edgerouter for that port the Archer is linked to and to establish a fixed IP-address for the latter.

The functional wiring would be in short:

ISP

ONT or V/DSL modem

EdgeRouter ---> Archer ----> Archer's full existing network as is (except omitted V/DSL modem part)

Switch (EdgeRouter's or a separate, external one)

| | | | |

.........................EdgeRouter's new network

Qui nihil scit, omnia credere debet.
Firewalls do NOT stop dragons.
In effect we have everything to hide from someone, and no idea who someone is.

freakngeek

356 posts

Ultimate Geek
+1 received by user: 123

#2073851 15-Aug-2018 12:20

New EdgeRouter firmware 1.10.6 has been released [ New ] Options 12 hours ago

New stable release v1.10.6 is available here:

ER-X, ER-X-SFP and EP-R6: https://dl.ubnt.com/firmwares/edgemax/v1.10.x/ER-e50.v1.10.6.5112725.tar
(SHA256:b60126005b7c57653971bca7884932dbf255be34ba491357f0cc1ac113271007)
ERLite-3 and ERPoe-5: https://dl.ubnt.com/firmwares/edgemax/v1.10.x/ER-e100.v1.10.6.5112654.tar
(SHA256:84fd0f23728ae66e350e37638eb0c969a37901895edcc40b9e811fdfdcef3b71)

ER-8, ERPro-8 and EP-R8: https://dl.ubnt.com/firmwares/edgemax/v1.10.x/ER-e200.v1.10.6.5112659.tar
(SHA256:99235bc28c1123482fba8c4d032a7415fc6c9ba5ae8be5b0344569b702153be7)

ER-4, ER-6P and ER-12: https://dl.ubnt.com/firmwares/edgemax/v1.10.x/ER-e300.v1.10.6.5112668.tar
(SHA256:2b844fed4fa7e5d43d0e5e4d57d14df7f20483871927fd7409b402e9ca6c161a)

ER-8-XG: https://dl.ubnt.com/firmwares/edgemax/v1.10.x/ER-e1000.v1.10.6.5112655.tar
(SHA256:d675220eea769efdbbc0c27833f7907263798629dc5e29a96dae4ea8ce240f7c)

[Release Notes v1.10.6]

Changelog

Changes since v1.10.6

New features:

[Bootloader] - Add CLI command to show bootloader version. Following example shows version of default bootloader which is available on stock ER-6P (in this case version of default bootloader is classified as UNKNOWN):ubnt@erlab-er6p-00:~$ show system boot-image
The system currently has the following boot image installed:

Uboot version: UNKNOWN
[Bootloader] - Add CLI command to upgrade bootloader. Following example upgrades default bootloader to new version:ubnt@erlab-er6p-00:~$ add system boot-image /tmp/boot_e301_001_99fd1.tar.gz Uboot version [UNKNOWN] is about to be replaced Warning: Don't turn off the power or reboot during the upgrade! Are you sure you want to replace old version? (Yes/No) [Yes]: Preparing to upgrade...Done Copying upgrade boot image...Done Checking boot version: Current is UNKNOWN; new is e301_001_99fd1 ...Done Checking upgrade image...Done Writing image...Done Upgrade boot completed

ubnt@erlab-er6p-00:~$ show system boot-image
The system currently has the following boot image installed:

Uboot version: e301_001_99fd1

Bootloader upgrade will be used to add additional features like TFTP and USB recovery. Bootloader images will be announced and release separately.

Enhancements and bug fixes:

[Bootloader] - Optimize DDR timing setting to improve stability of ER-8, ERPro-8 and EP-R8 models. This enhancement will automatically upgrade bootloader during v1.10.6 first boot. But in order to apply new DDR timing setting two consecutive reboots after firmware upgrade are needed. This enhancement fixes ER random reboot issue that was triggered by following errors in console:Kernel warning 03 Jul 2018, 14:26:13 Unhandled kernel unaligned access[#1]: Kernel warning 03 Jul 2018, 14:26:13 CPU: 1 PID: 3243 Comm: uacctd Tainted: P O 3.10.20-UBNT #1
...
Kernel warning 03 Jul 2018, 14:26:13 Call Trace:
Kernel warning 03 Jul 2018, 14:26:13 [<ffffffffc0080980>] do_ade+0x6c0/0xe10
Kernel warning 03 Jul 2018, 14:26:13 [<ffffffffc0078f20>] ret_from_exception+0x0/0xc
[FAN] - Improve FAN controller logic on ER-8-XG to fix potential overheating issue.
[WebGUI] - Update year in copyright notice
[CLI] - Do not show "intX" system interfaces in CLI on ER-12
[Interface] - Fix bug when packets ended up in wrong port on ER-12
[DPI] - Update DPI signatures
[Config] - Enable DHCP on eth1 in default configuration

Known issues:

Updated software components:

Today we are announcing v1.10.6 on Beta forum only. If no issues/regressions will be found then we will announce v1.10.6 on main forum and UNMS next week. (21 of August, 2018)

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Free setup code: R587125ERQ6VE. Note that to use Quic Broadband you must be comfortable with configuring your own router.

Jedi

13 posts

Geek

#2075503 18-Aug-2018 20:43

Hi Tinkerisk,

Thank you for your reply.

When you say "you'll need to have an additional Modem/ONT" do you mean I need a second internet connection from my ISP?

Thanks.

Tinkerisk

4800 posts

Uber Geek
+1 received by user: 3660

#2075586 19-Aug-2018 00:18

Jedi:

Hi Tinkerisk,

When you say "you'll need to have an additional Modem/ONT" do you mean I need a second internet connection from my ISP?

Nope. I assume you want to have the flexibility of the EdgeRouter in the first row of your total network. Since it has no build in modem/ONT, you need to have either one from your ISP or an own one (i.e. DrayTek Vigor130) in BridgeMode. The internal build-in modem of your actual Archer (I believe it has one) will be disabled and the router linked to one port of the EdgeRouter as a subnet without touching your existing network. If you want wifi in your NEW network, be sure to complete it at least with one access point since everything linked with the Archer stays in the old network.

Qui nihil scit, omnia credere debet.
Firewalls do NOT stop dragons.
In effect we have everything to hide from someone, and no idea who someone is.

Jedi

13 posts

Geek

#2075936 19-Aug-2018 21:31

Hi Tinkerisk,

Thank you for your reply, I appreciate it very much.

So the DrayTek goes between the fibrebox in the wall and the Edgerouter?

Michael Murphy in Reply # 1874170 27-Sep-2017 14:51 (page 13 of this post) says:
“Disable DHCP, set its IP on one that doesn't conflict with anything else, plug it into a general Ethernet port (not WAN) and you're away.” No mention of the need for an additional Modem/ONT. To assist with my learning can you explain the difference between that scenario and mine?

On a different note if you look at the screenshot of the WAN+2LAN2 wizard on page 1 of this post you will see a separate configuration tab for “(Optional) Secondary LAN port (eth1)”. When I run the WAN+2LAN2 wizard sometimes I get this and other times I get eth1, eth2, eth3 and eth4 all lumped together. I have attempted to post a screenshot of this below. Do you know what the variable is that determines whether or not the eth1 port gets its own configuration tab?

Thank you once again for your help.

Tinkerisk

4800 posts

Uber Geek
+1 received by user: 3660

#2075950 19-Aug-2018 22:04

Jedi:

Hi Tinkerisk,

Thank you for your reply, I appreciate it very much.

So the DrayTek goes between the fibrebox in the wall and the Edgerouter?

Michael Murphy in Reply # 1874170 27-Sep-2017 14:51 (page 13 of this post) says:
“Disable DHCP, set its IP on one that doesn't conflict with anything else, plug it into a general Ethernet port (not WAN) and you're away.” No mention of the need for an additional Modem/ONT. To assist with my learning can you explain the difference between that scenario and mine?

Well, I didn't read that you mentioned the fibrebox before. This results in "forget the modem" since you have already a box from the ISP there.

There is no difference anymore to what Michael said before.

On a different note if you look at the screenshot of the WAN+2LAN2 wizard on page 1 of this post you will see a separate configuration tab for “(Optional) Secondary LAN port (eth1)”. When I run the WAN+2LAN2 wizard sometimes I get this and other times I get eth1, eth2, eth3 and eth4 all lumped together. I have attempted to post a screenshot of this below. Do you know what the variable is that determines whether or not the eth1 port gets its own configuration tab?

The ER PoE behaviour is similar like the ERL3 except eth2, 3 and 4 are consolidated as a PoE switch. Thus said, you have to configure eth0, eth1 and eth2(3,4). In your case you might have to select for eth0 (WAN from the fiberbox), eth1 for LAN1/local (which will be connected to your Archer, no PoE) and eth2(3,4 - I believe this is grouped with the description "switch0" on the ER PoE) for LAN2/local2 for your new network (PoE as needed). I'd recommend to reset the whole router and start from scratch if that would prevent an eth mismatch due to misconfig). Seems to be a lot of NAT but it comes from your wish to keep as much as possible.

Qui nihil scit, omnia credere debet.
Firewalls do NOT stop dragons.
In effect we have everything to hide from someone, and no idea who someone is.

produKt

20 posts

Geek
+1 received by user: 1

#2077706 22-Aug-2018 21:32

Hey G33kteam ;)

I'm really keen on the Grafana setup guide - any idea when we might be seein' this?

Geekzone

Want to support Geekzone and browse the site without the ads? Subscribe to Geekzone now (monthly, annual and lifetime options).

Jedi

13 posts

Geek

#2079195 25-Aug-2018 21:53

Can anyone recommend a business that could provide a technician to get my Tp-Link router working through my Edgerouter? Alternatively if there is someone on here with the appropriate skills please provide a quote. I am based in Dannemora.

michaelmurfy

meow
13581 posts

Uber Geek
+1 received by user: 10914

Moderator

ID Verified

Trusted

Lifetime subscriber

#2079214 26-Aug-2018 01:35

Jedi:

Can anyone recommend a business that could provide a technician to get my Tp-Link router working through my Edgerouter? Alternatively if there is someone on here with the appropriate skills please provide a quote. I am based in Dannemora.

I'm not sure what you're trying to do here.

Basically what you're needing to do is to set up the Edgerouter like so:

[ONT] -- [ERX (eth0)] -- [ERX (eth1-4) rest of network]

You don't want to use your TP-Link router, this will set you up for a double-nat. I honestly think if you're having problems either one of the following:

1) Go back to the TP-Link as your main router.
2) Go with the Ubiquiti UniFi kit or the Grandstream kit ($$$ but worth it) or learn about using the Edgerouter as your main router.

Really, you need to forget about the TP-Link and go with a better solution based around your needs. I personally would never use a router like an Edgerouter just to put another router behind it but it doesn't sound like the Edgerouter is for you if you're asking these types of questions. I really don't want anyone to provide you help with a bit more of a complex router if you're never going to understand fully how it works as this can open you up to problems in the future.

Honestly, consider buying a UniFi AC-Lite access point and putting that behind the Edgerouter. Do everything on your Edgerouter and learn its inner workings. Really, you need to learn this for yourself. Once you're used to it then it is actually quite a nice router to use.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

Tinkerisk

4800 posts

Uber Geek
+1 received by user: 3660

#2079224 26-Aug-2018 07:45

@michaelmurfy

Keeping an existing network operable in parallel and moving it's components step by step to a new network isn't a bad idea at all. But as you pointed out (and I fully agree with) - it isn't something for beginners.

Qui nihil scit, omnia credere debet.
Firewalls do NOT stop dragons.
In effect we have everything to hide from someone, and no idea who someone is.

PANiCnz

999 posts

Ultimate Geek
+1 received by user: 161

#2079362 26-Aug-2018 12:41

Would anyone be willing to offer some advice on the following configuration? Conceptually I know what I want to do but no idea where to start from a configuration perspective. I'm hosting a service on a NanoPi that I want to be externally and internally accessible. But want to isolate the Pi so that if it is compromised it can't be easily used to gain access to my local network.

Connect the NanoPi to eth2 (currently not in use), create port forward on the WAN interface for 2 ports to the NanoPi on eth2, and then allow any device on eth1 (LAN) to establish a connection to the NanoPi on eth2 on the same ports + open port 22, and block any connections from eth2 to eth1.

1 | ... | 18 | 19 | 20 | 21 | 22 | 23 | 24 | 25 | 26 | 27 | 28 | ... | 57