EdgeRouter X - Ubiquiti - (ER X)

configure
delete interface ethernet eth0 ipv6
edit firewall ipv6-name WANv6_IN
set rule 30 action accept
set rule 30 description 'Allow ICMPv6 in LAN'
set rule 30 protocol icmpv6
commit; top; save; exit

configure
delete service dns
set system name-server 192.168.0.99
commit; save; exit

configure
edit service nat rule 100
delete destination address 192.168.0.99
set destination address !192.168.0.99
commit; top; save; exit

clear nat counters

show nat statistics

ogo, on 11 iunie 2021 - 17:15, said:

1st.
incearca asa:

configure
delete interface ethernet eth0 ipv6
edit firewall ipv6-name WANv6_IN
set rule 30 action accept
set rule 30 description 'Allow ICMPv6 in LAN'
set rule 30 protocol icmpv6
commit; top; save; exit

DONE

ai start leasing la .2 si end la 245, ai pi-hole la .99 : bQ910 asta e pi-hole-ul? (mac 00:19:99:d5:4d:a5) ?

Da, ala e pi-hole.

folosesti dns forwarding: asta se foloseste atunci cand vrei ca router-ul tau sa fie si server de dns in lan - dar tu folosesti pi-hole-ul, deci nu-si prea are rostul.
sterge serviciul si aloca gateaway-ului tau ca dns server-ul de pi-hole.

configure
delete service dns
set system name-server 192.168.0.99
commit; save; exit

DONE.


nat regula 100
la destination trebuie sa ai tot ce e diferit de 192.168.0.99 adica trebuie ! in fata:

configure
edit service nat rule 100
delete destination address 192.168.0.99
set destination address !192.168.0.99
commit; top; save; exit

Eh, aici e belea. Daca setez destination cu ! in fata, nu mai merge nimic. Urlau copiii ca din gura de sarpe pana m-am prins de ce a picat tot.
Ceva nu-i place aici... stiu ca si data trecuta tot asa mi-ai zis, dar a trebuit sa ignor, de aia era prezent acum fara ! in fata.
Nu stiu ce nu-i place, poate sintaxa, poate e vreo alta setare, dar pica in cap internetul, pot apela si raspund doar IP-uri din LAN...



verifica:

in router:

clear nat counters

apoi
de pe un windows:
start > run > cmd
nslookup google.com 1.1.1.1

Pe regula cu destination = ! 192.168.0.99, nu iese din LAN...

pe router

show nat statistics

ar trebui sa ai acelasi nr la count si la regula 100 si la regula 5100

Are acelasi count la ambele.

Iarasi, ca fapt divers, as micsora pool-ul dhcp-ului, de ex. intre 192.168.0.100 si .200 (sunt indeajuns 100) / as pune ip-uri fixe la AP-uri si la pi-hole (acelasi ip-uri care le ai acum dar sa nu fie in pool-ul dhcp-ului).

Am micsorat pool-ul, l-am pus de la 200-245, imi sunt suficienti 45 de clienti. Pana la .150 am nevoie de unele fixe, am alte configurari care depind de ele.

Orice VPN iti va creste latenta; conteaza si de acoperirea provider-ului GSM (una e sa te contectezi de pe 4G si alta de pe Edge).

Wireguard e mai mult decat OK. Il poti instala direct pe ER-X

Whaaaaat !???? Nu m-as risca, poate stric si una si alta...

Xelo, on 11 iunie 2021 - 18:36, said:

rule 100 {
				 description "DNS redirect to pihole"
				 destination {
						 address 192.168.0.99
						 port 53
				 }
				 inbound-interface switch0
				 inside-address {
						 address 192.168.0.99
						 port 53
				 }
				 log disable
				 protocol tcp_udp
				 source {
						 address [b]192.168.0.2-192.168.0.245[/b]
				 }
				 type destination
		 }
		 rule 5010 {
				 description "masquerade for WAN"
				 outbound-interface pppoe0
				 type masquerade
		 }
		 rule 5100 {
				 description "DNS masquerade for pihole"
				 destination {
						 address 192.168.0.99
						 port 53
				 }
				 log disable
				 outbound-interface switch0
				 protocol tcp_udp
				 source {
						 [b]address 192.168.0.2-192.168.0.245[/b]
				 }
				 type masquerade
		 }

configure
edit service nat rule 100
delete destination address 192.168.0.99
set destination address !192.168.0.99
delete source address 192.168.0.2-192.168.0.255
set source address 192.168.0.200-192.168.0.254
top
edit service nat rule 5100
set source address 192.168.0.200-192.168.0.254
top
commit; save; exit

ogo@gw# show service nat rule 100
description "DNS redirect for MAIN network"
destination {
	 address !192.168.0.77-192.168.0.78
	 port 53
}
inbound-interface eth3
inside-address {
	 address 192.168.0.77-192.168.0.78
	 port 53
}
log disable
protocol tcp_udp
source {
	 address 192.168.0.100-192.168.0.254
}
type destination

ogo@gw# show service nat rule 5100
description "DNS masquerade for MAIN network"
destination {
	 address 192.168.0.77-192.168.0.78
	 port 53
}
log disable
outbound-interface eth3
protocol tcp_udp
source {
	 address 192.168.0.100-192.168.0.254
}
type masquerade

Edited by ogo, 11 June 2021 - 19:04.

Quote

Edited by Xelo, 11 June 2021 - 19:45.

Edited by ovidiuvio, 08 October 2021 - 18:23.

ogo@gw-003-test:~$ show ip bgp neighbors
BGP neighbor is 192.168.0.1, remote AS 64567, local AS 64568, external link
  BGP version 4, remote router ID 192.168.0.1
  BGP state = Established, up for 01w2d04h
  Last read 01w2d04h, hold time is 180, keepalive interval is 60 seconds
  Neighbor capabilities:
	Dynamic: advertised and received
	Route refresh: advertised and received (old and new)
	4-Octet ASN Capability: advertised and received
	Address family IPv4 Unicast: advertised and received
  Received 13252 messages, 0 notifications, 0 in queue
  Sent 13251 messages, 0 notifications, 0 in queue
  Route refresh request: received 0, sent 0
  Minimum time between advertisement runs is 30 seconds
 For address family: IPv4 Unicast
  BGP table version 20, neighbor version 20
  Index 1, Offset 0, Mask 0x2
  Inbound soft reconfiguration allowed
  Community attribute sent to this neighbor (both)
  19 accepted prefixes
  0 announced prefixes

 Connections established 1; dropped 0
  External BGP neighbor may be up to 10 hops away.
Local host: 192.168.0.171, Local port: 179
Foreign host: 192.168.0.1, Foreign port: 39070
Nexthop: 192.168.0.171
Nexthop global: fe80::7683:c2ff:fe4d:5706
Nexthop local: ::
BGP connection: non shared network
 

ogo, on 18 aprilie 2020 - 03:13, said:

"Aruncat" in rack:
IMG_2457.jpg

Edited by Ravy, 09 October 2021 - 04:52.

Edited by Ravy, 09 October 2021 - 04:51.

Edited by Ravy, 09 October 2021 - 04:50.

CyberPower > devsta show

Load
-----------------------------------------------
Device Load : 1.33 A/ 270 W/ 300 VA
Power Factor : 0.90
Peak Load : 1.44A (at 29-Jul-21 03:08:19)
Energy : 2491.4kWh (from 10-Jan-19 19:33:40)


Utility
-----------------------------------------------
Voltage : 229.3V
Frequency : 50.0Hz

Edited by ogo, 08 October 2021 - 21:13.

Edited by Ravy, 09 October 2021 - 04:49.