Ubiquiti Edgerouter Tutorial

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › Ubiquiti Edgerouter Tutorial

1 | ... | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | ... | 57

592 posts

Ultimate Geek
+1 received by user: 243

ID Verified

Subscriber

#1791891 30-May-2017 17:47

I'm not super concerned about it, but I can upload my config if you'd like. I wouldn't have noticed it if it wasn't brought up.

ZL2TOY/ZL1DMP

dmartora

75 posts

Master Geek
+1 received by user: 1

ID Verified

Lifetime subscriber

#1797815 10-Jun-2017 20:17

Hi, I need some help exclaimed in a very, very (very) simple way.

I have an EdgeRouter PoE 5. Works a treat thanks to the infornation and I found on here. Works a treat.

I want to create some access rules to limit internet access.

I have a number of APs on the network that have a common role based on MAC address that work fine, but I also have a number of wired devices on the network and I'd like to limit internet access based on MAC, day and time. It's just not that obvious to me.

I'm trying to use the EdgeOS web GUI as that's as complex as I can get. I've tried creating firewall rules, but they don't seem to stop traffic.

Can anyone point me in the right direction?

michaelmurfy

meow
13581 posts

Uber Geek
+1 received by user: 10914

Moderator

ID Verified

Trusted

Lifetime subscriber

#1797821 10-Jun-2017 20:46

You can do this via timed Firewall rules: https://community.ubnt.com/t5/EdgeMAX/Time-control-parental-controll/td-p/1035259

I've never tried this nor have any need to however.

Michael Murphy | https://murfy.nz
Referral Links: Quic Broadband (use R122101E7CV7Q for free setup)

Are you happy with what you get from Geekzone? Please consider supporting us by subscribing.
Opinions are my own and not the views of my employer.

dmartora

75 posts

Master Geek
+1 received by user: 1

ID Verified

Lifetime subscriber

#1797975 11-Jun-2017 12:20

Thank you. After a bit of twiddling, this worked a treat. Very much appreciated.

andrewpaul

3 posts

Wannabe Geek

#1804847 21-Jun-2017 20:23

Hi so have my Edgerouter upgraded and setup with Stuff Fiber thanks to this great tutorial.

Problem I have is that I setup the 2 default subnets through the wizard.
They are the 192.168.1.1 on ETH1 and 192.168.2.1 on ETH2.

The idea was to connect all my hardwired devices to ETH1 through a switch and connect ETH2 to a WAP for WiFi keeping the traffic separate.

Problem is that a device connected to the wired network like a 5.1 Receiver with an App to control it cannot be seen by the App connecting over WiFi.

Any help to connect both subnets would be appreciated.
Or am I better off just killing ETH2 and linking the WAP as well to the switch? All on 192.168.1.1

Thanks.

michaelmurfy

meow
13581 posts

Uber Geek
+1 received by user: 10914

Moderator

ID Verified

Trusted

Lifetime subscriber

#1804968 22-Jun-2017 07:35

@andrewpaul Yes in your case you're best to shove this on the same switch and if needed use a VLAN with a secondary SSID for devices you want to keep seperate.

Samsung

Shop now on Samsung phones, tablets, TVs and more (affiliate link).

andrewpaul

3 posts

Wannabe Geek

#1805582 23-Jun-2017 11:49

Thanks for all your help Michael.

Tried a VLAN setup and setup both my ERL-3 and ES-Lite. Tried it and the receiver App now works.

Interesting observation was that I have a DoorBird - www.doorbird.com

Tried to link it over the VLAN network ie. DoorBird hardwired and App is WiFi but no joy.

Plugged the DoorBird into the same VLAN as the WiFi WAP and the DoorBird could not even

connect to the internet through the VLAN connection ?

stubbed

GIS Geek
142 posts

Master Geek
+1 received by user: 91

Trusted

Lifetime subscriber

#1806396 25-Jun-2017 14:35

@michaelmurfy just a query about IPv6.

Can I use vlan interfaces rather than physical interfaces for the following? Additionally, I'm running EdgeRouter PoE v1.9.1.1, and I don't have set interface, I have set interfaces ethernet <physical interface>.

set interface eth1 host-address ::1
set interface eth1 prefix-id :0
set interface eth1 service slaac

And I think there's a typo in https://murfy.nz/files/er_v6.txt

set interfaces ethernet eth1 ppoe 0 firewall in ipv6-name WAN6_IN
set interfaces ethernet eth1 pppoe 0 firewall local ipv6-name WAN6_LOCAL

Once these have been configured, should you be able to see them in the GUI or are these CLI only?

https://gisgeek.app

michaelmurfy

meow
13581 posts

Uber Geek
+1 received by user: 10914

Moderator

ID Verified

Trusted

Lifetime subscriber

#1806397 25-Jun-2017 14:41

@stubbed You can indeed - I will assume you have IPv6 configured on PPPoE on eth0 and want to add IPv6 to VLAN 20 on eth1:

edit interfaces ethernet eth0 pppoe 0 dhcpv6-pd pd 0
set interface eth1 vif 20 host-address ::1
set interface eth1 vif 20 prefix-id :1
set interface eth1 vif 20 service slaac
top
commit
save

Remember to increase the prefix-id by 1 each time for different interfaces hence why I have used 1 here instead of 0. Also thanks for pointing out that typo! I have corrected it.

stubbed

GIS Geek
142 posts

Master Geek
+1 received by user: 91

Trusted

Lifetime subscriber

#1806403 25-Jun-2017 14:49

Thanks.

I'm getting the following:

admin@fw# set interface
dummy0 eth1 eth1.112 eth1.2055 eth2 eth4 lo switch0
eth0 eth1.111 eth1.200 eth1.2056 eth3 imq0 pppoe0
[edit interfaces ethernet eth0 pppoe 0 dhcpv6-pd pd 0]

So I assume it's as straight forward as just entering the config for the vlan off eth1 that I need?

https://gisgeek.app

michaelmurfy

meow
13581 posts

Uber Geek
+1 received by user: 10914

Moderator

ID Verified

Trusted

Lifetime subscriber

#1806411 25-Jun-2017 15:01

@stubbed Yep that is the one. Just remember to increase your prefix-id each time.

AliExpress

Shop now on AliExpress (affiliate link).

ArdRigh

25 posts

Geek
+1 received by user: 1

#1806709 26-Jun-2017 01:39

I am considering purchasing an Edgerouter 8 for my home network, to replace my aging Linksys unit. Is there anything special to consider with the setup before I purchase it?

Currently on Vodafone cable, but the Edgerouter will be ideally to move onto UFB in the near future.

Assuming I use eth0 for the internet, the remaining ports would be for the internal network. Some basic port forwarding and running a firewall.

I haven't used any Ubiquiti equipment before so I am not sure if there are any gotchas to watch out for. Updating the firmware always seems relevant for routers.

michaelmurfy

meow
13581 posts

Uber Geek
+1 received by user: 10914

Moderator

ID Verified

Trusted

Lifetime subscriber

#1806714 26-Jun-2017 04:52

@ArdRigh You don't at all need an Edgerouter 8 for a home network at all - I would suggest saving some money and going for an Edgerouter Lite which will perform the same for your needs and grabbing an ethernet smart switch for vlan tagging if you're needing that too. Basically with the Edgerouters with a standard home configuration you have internet going into one port and your network out the other - the ports are for routing and not switching.