*** Official Ubiquiti Discussion Thread ***

Soldato
Joined
18 Oct 2002
Posts
5,983
Location
N.Devon
setup my Edge Router Lite just now

was very straight forward, had to be reboot my SuperHub (modem mode) for it to get an IP

port forwarding working fine too.

ive left the firewall rules as they are (from using the basic setup wizard), this secure out of the box yes?

will sort out of the openvpn config on the weekend.

i know have two R7000 in AP mode around the house but will maybe upgrade to Ubiquiti soon.

i have a NAS so wanted uPNP on, i assume i just set it from Eth1 (int) to Eth0 (ext) ?

Config Tree > Service > upnp2

Listen-On = Eth1
nat-pmp = enable
port = specify a port or leave blank and allow any port to be opened (i think thats how it works)
secure-mode = enable
wan = your WAN interface

Hit Preview

You can see what ports are being opened in the firewall and forwarded by upnp by opening the CLI and typing

show upnp2 rules
 
Last edited:

RSR

RSR

Soldato
Joined
17 Aug 2006
Posts
9,546
If you are going it via the CLI, the commands are:

set service upnp2 listen-on <internal port>
set service upnp2 nat-pmp enable
set service upnp2 secure-mode enable
set service upnp2 wan <wan port>

Example for a PPPOE / Switch interface:

set service upnp2 listen-on switch0
set service upnp2 nat-pmp enable
set service upnp2 secure-mode enable
set service upnp2 wan pppoe0
 
Soldato
Joined
12 Feb 2004
Posts
7,266
Location
Manchester
thanks mate, have now used upnp2

my next issue and i have googled this! is getting Opendns to work on the Edge Router

I have entered the 2 open DNS servers in the name server section on the edge and also went to Config Tree and applied it





When i run this command in CLI: show dns forwarding statistics

it shows:



so it seems its taken it but still shows VM DNS's too!

I have also tried creating 3 rules to force DNS out to OpenDNS



But this did not work

any ideas?

EDIT, managed to get it working :)

did this via CLI:

configure
set service dns forwarding system
commit
save
exit
exit
 
Last edited:

RSR

RSR

Soldato
Joined
17 Aug 2006
Posts
9,546
UAP-AC-LITE - This model is fine for most things.
UAP-AC-PRO - If you need a pass through ethernet port and greater bandwidth
UAP-AC-LR - If you need the expended range. i.e garden or shed etc....
 

RSR

RSR

Soldato
Joined
17 Aug 2006
Posts
9,546
I assume the Edge router can connect to the controller aswell as the Access Points yes?

Edge Router can't be connected to the UniFi Controller, you'll need a USG for this.

However, doing some reverse engeering you maybe able to get it to work but in short no.
 
Associate
Joined
20 Nov 2011
Posts
1,190
Yes it's a bit limiting but possible in the right environment, mines going indoors but I may have to mount one externally depending on the coverage I get. I'll just put it in a metal box :D
 
Man of Honour
Joined
20 Sep 2006
Posts
34,046
How do I route back to my modem on eth0?

I can ping it from CLI, just can't ssh or route from the network on eth1.

Code:
ubnt@ubnt:~$ show interfaces 
Codes: S - State, L - Link, u - Up, D - Down, A - Admin Down
Interface    IP Address                        S/L  Description                 
---------    ----------                        ---  -----------                 
br0          192.168.1.254/24                  u/u  Local Bridge                
eth0         192.168.2.2/24                    u/u  Internet (PPPoE)            
eth1         -                                 u/u  Local Bridge                
eth2         -                                 u/D  Local Bridge                
lo           127.0.0.1/8                       u/u                              
             ::1/128                          
pppoe0       xx.xx.xx.xx                    u/u
 
Last edited:
Back
Top Bottom