Ubiquiti Edgerouter Tutorial

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Ubiquiti Edgerouter Tutorial

1 | ... | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | ... | 57

55 posts

Master Geek

#2198316 15-Mar-2019 00:28

I have purchased an EdgeRouter SFP and using this guide I have successfully set it up replacing my Huawei, in the process I managed to get rid of 2x PoE adaptors for my Unifi. The whole thing was pretty straightforward with the Wizard, following this guide.

Everything seems to be working well, with the exception of one thing - Remote Desktop has stopped working. I don't know why and I don't know how to fix it, and wonder if you can point me in the right direction?

Without going into the specific, I have a PC which I use in headless mode (i.e. no screen, keyboard or mouse). On boot it starts the Remote Desktop Server automatically. To control this PC, I remote into it using Remote Desktop app on my Mac. Both the headless PC and the controlling Mac are on the same home network (say, PC on 192.168.1.80 and Mac on 192.168.1.81 via reserved DHCP IP)

I suspect the default setup with EdgeOS Wizard has created some kind of "block" for Remote Desktop. Can you please tell me what I need to change to get the functionality back? I have googled it and found some mentions about enabling port forwarding, however it seems this is for those situations where the controlling PC and the controlled PC are on different network?

Sorry for the newbie question.

michaelmurfy

meow
13242 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2198317 15-Mar-2019 01:05

@HenryNZ There shouldn't be any restrictions here but I'd say the issue with you is Windows has detected a network change and has put the network into "public" mode (thus causing the firewall to block remote desktop). Very common if you do any network changes. You'll need to check the firewall on the Windows machine in question.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

HenryNZ

55 posts

Master Geek

#2198318 15-Mar-2019 01:13

Thank you Michael, I will have a look at it by hooking up a screen and keyboard to the headless Pc and see what windows is doing.

michaelmurfy

meow
13242 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2198319 15-Mar-2019 01:19

@HenryNZ A bit of a tip - install Anydesk (https://anydesk.com) on the PC also. It gets past firewalls and is tiny. This way you'll never have to hook things up unless if something is seriously wrong :)

iamsammajor

370 posts

Ultimate Geek

Lifetime subscriber

#2198360 15-Mar-2019 07:22

Any one have a Edgerouter and Synology NAS? Im trying to set up VPN server in the NAS, but keep failing on setup of port forwarding.

alisam

829 posts

Ultimate Geek

#2198477 15-Mar-2019 11:34

iamsammajor:

Any one have a Edgerouter and Synology NAS? Im trying to set up VPN server in the NAS, but keep failing on setup of port forwarding.

I have.

Six months ago I tried to set VPN server and I couldn't port forward. I put that down to my lack of knowledge, even after watching some YouTube videos. The videos seemed to gloss over the port forwarding.

Sorry that I cannot help you.

PC: HP ProBook 470G1 (Windows 10 Pro), Intel NUC7I5BNH (Windows 10 Pro), Dell Inspiron 7591 2n1 (Windows 11 Pro)
Net: Grandstream 1 x GWN7062, 1 x GWN7610, 1 x GWN7665
Storage: Synology DS216play NAS, 2 x 6TB
Media: 3 x Amazon FireTV. Echo, Dot, Spot
TV: 2 x Samsung H6400 55" LED TV, Panasonic TH-P50G10Z 50" Plasma TV
Mobile: Samsung Galaxy A52 5G
Wearable: Gear S3 Frontier

iamsammajor

370 posts

Ultimate Geek

Lifetime subscriber

#2198655 15-Mar-2019 14:06

alisam:

iamsammajor:

Any one have a Edgerouter and Synology NAS? Im trying to set up VPN server in the NAS, but keep failing on setup of port forwarding.

I have.

Six months ago I tried to set VPN server and I couldn't port forward. I put that down to my lack of knowledge, even after watching some YouTube videos. The videos seemed to gloss over the port forwarding.

Sorry that I cannot help you.

same case with mine, I set the port forwarding in ERL, but in synology keep saying i havent got the port sorted

Samsung

Shop now on Samsung phones, tablets, TVs and more (affiliate link).

fe31nz

1229 posts

Uber Geek

#2199277 16-Mar-2019 00:03

The usual reason for port forwarding setups in an Edgerouter not working is that only half the necessary setup was done. As well as the actual port forwarding, you also need to set up the firewall to allow traffic on that port. Simple routers often do this automatically when you add a port forwarding rule, but Edgerouters do not as they can have very complicated routing and firewalling and the automatic rule that was added might not do what was expected in such a setup.

freakngeek

356 posts

Ultimate Geek

#2202654 20-Mar-2019 22:24

New EdgeRouter firmware 2.0.1 has been released

New release v2.0.1 is available here:

ER-X, ER-X-SFP and EP-R6: https://dl.ubnt.com/firmwares/edgemax/v2.0.x/ER-e50.v2.0.1.5174691.tar
(SHA256:870f4140810a0c6771ed5057b862f5074502790f43ed83cb728a08c9bcc872a3)
ERLite-3 and ERPoe-5: https://dl.ubnt.com/firmwares/edgemax/v2.0.x/ER-e100.v2.0.1.5174691.tar
(SHA256:3cf7600376a05c5d9f5bfbc6726dfd8b0df8162586f1ebc23b79416468041c23)

ER-8, ERPro-8 and EP-R8: https://dl.ubnt.com/firmwares/edgemax/v2.0.x/ER-e200.v2.0.1.5174691.tar
(SHA256:aefea687750260490586e5eefe326b53f935b6a7723f277dcf8e9d718352c9ed)

ER-4, ER-6P and ER-12: https://dl.ubnt.com/firmwares/edgemax/v2.0.x/ER-e300.v2.0.1.5174690.tar
(SHA256:efdf1b52b3d6ed8852196c82b0239ba5a42634127a388ed151c3159b457ad665)

ER-8-XG: https://dl.ubnt.com/firmwares/edgemax/v2.0.x/ER-e1000.v2.0.1.5174691.tar
(SHA256:b4cf1d91b75927dc112515b6e0b6bb2e0d1af7deb7e028682632284c49302f12)

Note: The ER-X/ER-X-SFP/EP-R6 has more limited storage, and in some cases, an upgrade may fail due to not enough space. If this happens, remove the old backup image first (using "delete system image" command, see here for more details) before doing an upgrade.

More details can be found in the release notes below. Please give it a try if you are interested in the new features/changes to help us test them so that we can get the release out sooner! Thanks very much!

[Release Notes v2.0.1]

Changelog

Changes since v2.0.1

New features:

Enhancements and bug fixes:

!!! [Offloading] - Fix regression in v1.10.2 when offloading on Cavium-based routers would stop functioning after 1 month of uptime. Discussed here
[Offloading] - Fix bug when offloading did not work on ER-12
[Offloading] - Fix regression in v2.0.0 when hwnat throughput on ER-X is not consistent and CPU-load is very "jumpy". Discussed here
[Firewall] - Setup wizards now enable default IPv6 firewall to protect ER from being discoverable from WAN via IPv6 link-local address
[Firewall] - Fix regression in v2.0.0 when firewall did not match related flows of FTP/SIP/PPTP... and many other protocols. Discussed here
[Firewall] - Fix regression in v2.0.0 when firewall on bridge interface did not work. Discussed here and here
[Interface] - Set physical link of ethernet interface to DOWN when disabling interface from CLI or WebGUI. Discussed here and here
[Discovery] - Restore pre-v2.0.0 functionality when unicast UDP discovery message from WAN were ignored. This is needed to protect ER from being used for amplification DDoS attacks if firewall was not configured
[IPv6] - Fix regression in v2.0.0 when radvd crashed if OpenVPN interface was configured. Discussed here
[IPv6] - Fix bug when DHCPv6 client would stuck when running "release dhcpv6 interface" if IPv6 address was not acquired
[IPv6] - Fix bug when IPv6 address auto-configuration doesn't work upon reboot. Discussed here and here
[OSPFv3] - Fix "command not found" error when setting OSPFv3 interface
[DHCPv6] - Fix bug when DHCPv6 lease file were preserved when deleting DHCPv6 server configuration
[Config] - Fix regression in v2.0.0 when firewall configuration was slower when DNS server was not reachable. Discussed here
[Config] - Refactor legacy code that used to slow down system boot. Discussed here
[QoS] - Fix bug when new 'egress-qos' settings would not be reapplied until system reboot
[DHCPv6] - Fix bug when DHCPv6 would keep old address if DHCP pool range would change
[CLI] - Increase CLI auto-completion buffer size. Discussed here
[Tech-Support] - Hide configured password when running "show tech-support" CLI command
[IPSec] - Fix bug when IPSec log-rotation failed
[Webproxy] - Fix regression in v2.0.0 when webproxy configuration failed. Discussed here
[Logging] - Set 2Mb systemd log file limit on ER-X/ER-X-SFP/EP-R6
[Interface] - Fix regression in v2.0.0 when ethernet interface on ER-X would randomly stop passing traffic after 1-5 days of uptime. Discussed here
[Interface] - Fix bug when VLAN on bridge interface would not work on ER-12/ER-12P
[Interface] - Fix regression in v2.0.0 when VLAN with 'vlan-aware' would not work correctly on ER-X. Discussed here
[Interface] - Fix regression in v2.0.0 when "unregister_netdevice" kernel error when ECMP routes were configured and hwnat enabled on ER-X. Discussed here
[Interface] - Fix bug when packets greater than 1500 would not pass on ER-X even if MTU was correct
[PPPoE] - Fix regression in v2.0.0 when PPPoE did not work if switch0 is enabled on ER-PoE. Discussed here
[Boot] - Fix multiple minor errors that were reported on ER-X during boot. Discussed here
[Kernel] - Restore "modules.order" file on ER-X which is needed when installing 3rd party kernel modules. Discussed here

Known issues:

Updated software components:

[ISC DHCP] Upgrade ISC DHCP server to 4.1-ESV-R15
apt 1.4.9
apt-transport-https 1.4.9
base-files 9.9+deb9u8
curl 7.52.1-5+deb9u9
gnupg 2.1.18-8~deb9u4
gnupg-agent 2.1.18-8~deb9u4
gpgv 2.1.18-8~deb9u4
libapt-pkg5.0 1.4.9
libc-bin 2.24-11+deb9u4
libc6 2.24-11+deb9u4
libcurl3 7.52.1-5+deb9u9
libcurl3-gnutls 7.52.1-5+deb9u9
libgnutls-openssl27 3.5.8-5+deb9u4
libgnutls30 3.5.8-5+deb9u4
libpam-systemd 232-25+deb9u9
libpython2.7-minimal 2.7.13-2+deb9u3
libpython2.7-stdlib 2.7.13-2+deb9u3
libseccomp2 2.3.1-2.1+deb9u1
libssl1.0.2 1.0.2r-1~deb9u1
libssl1.1 1.1.0j-1~deb9u1
libsystemd0 232-25+deb9u9
libudev1 232-25+deb9u9
linux-igd 1.0+cvs20070630-5+deb9u1
mgetty 1.1.36-3+deb9u1
multiarch-support 2.24-11+deb9u4
openssh-client 1:7.4p1-10+deb9u6
openssh-server 1:7.4p1-10+deb9u6
openssh-sftp-server 1:7.4p1-10+deb9u6
openssl 1.1.0j-1~deb9u1
openvpn 2.4.0-6+deb9u3
python2.7 2.7.13-2+deb9u3
python2.7-minimal 2.7.13-2+deb9u3
ssh 1:7.4p1-10+deb9u6
systemd 232-25+deb9u9
systemd-sysv 232-25+deb9u9
tzdata 2018i-0+deb9u1
udev 232-25+deb9u9

Bootloader enhancements and fixes:

Upgraded bootloader for ER-4/ER-6/ER-12 to fix random bug when Ethernet ports did not pass traffic after reboot.

This firmware will be published on main forum and UNMS in one week.

iamsammajor

370 posts

Ultimate Geek

Lifetime subscriber

#2202716 21-Mar-2019 08:55

Im having problem setting up stat IP for my NAS, I manually set my NAS as 192.168.1.88 at the NAS network setting ( im Chinese and like the good number 8 :P)

But edgerouter always show its IP as 192.168.1.48 and this cause confusion to me. (website login for the NAS is 192.168.1.88, when i tried 48 doesnt work)

I am not too sure what IP I should set in port-forwarding. Should it be the one i set in the NAS or the one I see in edgerouter?

Kiwifruta

1423 posts

Uber Geek

ID Verified

#2202723 21-Mar-2019 09:04

You probably need to flush that address out of your edgerouter and set the NAS IP address outside of your DHCP range.

iamsammajor

370 posts

Ultimate Geek

Lifetime subscriber

#2202726 21-Mar-2019 09:13

Kiwifruta: You probably need to flush that address out of your edgerouter and set the NAS IP address outside of your DHCP range.

flush that address?

nitro

657 posts

Ultimate Geek

#2202782 21-Mar-2019 11:36

don't have an edgerouter (yet), so i can't be specific on how to do it but...

i normally do this on the router (static ip mapping), rather than the nas. that way, if i should move the nas to a different router, it will get allocated an address by that router.

also, as kiwifruta suggested, the addresses i statically map are outside of the dhcp range.

michaelmurfy

meow
13242 posts

Uber Geek

Moderator

ID Verified

Trusted

Lifetime subscriber

#2202846 21-Mar-2019 13:06

@iamsammajor Under Services edit your DHCP pool (the 192.168.1.* one) and find your NAS under that list. Ensure your NAS is on DHCP.

Next to your NAS listing select "Map Static IP" - ensure it doesn't already exist under the "Static MAC/IP Mapping" tab and map it with 192.168.1.88.

Reboot your NAS to force it to get a new DHCP lease and you'll be sorted, it'll be available going forward on 192.168.1.88.

mAYH3M

162 posts

Master Geek

#2202964 21-Mar-2019 18:03

I'm using a Edgerouter-X SFP with Voyager UFB (PPPoE).I tried enabling VLAN ID - 10 along with filling in PPPoE details but there is no internet connection on WAN.

Just filling in the PPPoE details without enabling VLAN 10 connects me to the internet.Voyager recommends using VLAN 10 with PPPoE.

1 | ... | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | ... | 57