Javascript Disabled Detected

You currently have javascript disabled. Several functions may not work. Please re-enable javascript to access full functionality.

« 1 / 5 »

Resoftare camera supraveghere

Cu ce va aparati de cainii agresi...

Nu imi platiti coletul cu cardul ...

Mi-au disparut amigdalitele ?

Exista vreun plan de terorizare p...

Schimbare adresa DNS IPv4 pe rout...

Recomandare Barebone

Monede JO 2024

Suprasolicitare sistem electric

CIV auto import

Mutare in MOZAMBIC - pareri, expe...

Scoatere antifurt airtag de pe ha...

Magnet in loc de clește pent...

Cumparat/Locuit in apartament si ...

Pot folosi sistemul PC pe post de...

Sokol cu distorsiuni de cross-over

View New Content

EdgeRouter X - Ubiquiti - (ER X)

3 votes

Last Updated: Mar 09 2024 11:58, Started by wolfydRg , Nov 09 2019 21:14

Please log in to reply

570 replies to this topic

#505
ogo

Posted 14 April 2023 - 17:07

Senior Member

Grup: Senior Members
Posts: 4,537
Înscris: 07.03.2006

adica, daca accesezi ip local, 10.0.0.100:55661 din lan merge, dar daca accesezi ip public 1.1.1.1:55661 tot din lan nu merge?
pune un print screen dupa firewall/nat > port forwarding cu show advanced options bifat
ca fapt divers trebuie si auto-firewall bifat.

#506
PeRuZzI

Posted 14 April 2023 - 17:24

Member

Grup: Members
Posts: 443
Înscris: 30.12.2005

Exact, daca accesez din extern merge, daca accesez din intern nu merge. Este bifat auto firewall.

Attached Files

Screenshot 2023-04-14 at 18.23.37.png 55.14K 29 downloads

Edited by PeRuZzI, 14 April 2023 - 17:28.

#507
ogo

Posted 15 April 2023 - 02:49

Senior Member

Grup: Senior Members
Posts: 4,537
Înscris: 07.03.2006

pune tot config-ul
ssh la router, login, si:

show configuration | no-more

si pune output-ul aici.
merge si cu hairpin+dnat configurat ca alternativa.

#508
PeRuZzI

Posted 15 April 2023 - 21:15

Member

Grup: Members
Posts: 443
Înscris: 30.12.2005

Am rezolvat, din fericire nu e de la router. Era de la serverul catre cine se facea forward-ul. Nu inteleg ce si cum, insa am pus acelasi port catre alt server si functioneaza fara probleme.

Multumesc.

#509
Bennedict

Posted 10 May 2023 - 13:18

Junior Member

Grup: Members
Posts: 61
Înscris: 29.09.2008

@ogo Ai testat vreodata varianta asta de OLT de la Ubiquiti? M-ar interesa sa scap de OLT-ul digi, batranul ZTE F618 V2. Conform tutorialului de aici, ar trebui sa functioneze doarece digi nu securizeaza conexiunea decat in baza MAC-adress-ului si a SN-ului OLT-ului.

[ https://www.youtube-nocookie.com/embed/ZI2U8wnJ4IQ?feature=oembed - Pentru incarcare in pagina (embed) Click aici ]

#510
ogo

Posted 10 May 2023 - 13:46

Senior Member

Grup: Senior Members
Posts: 4,537
Înscris: 07.03.2006

N-am idee de modelul specificat de ONT/ONU (OLT e altceva) dar vezi ca pe aria rds ca e topic dedicat pt asa ceva

#511
Bennedict

Posted 10 May 2023 - 13:56

Junior Member

Grup: Members
Posts: 61
Înscris: 29.09.2008

Multumesc, sper sa fi postat unde trebuie, pe topicul dedicat. In principiu as vrea sa scap de GPON-ul ZTE ca imi ocupa spatiu si e maricel.

Edited by Bennedict, 10 May 2023 - 13:56.

#512
Bennedict

Posted 07 July 2023 - 19:38

Junior Member

Grup: Members
Posts: 61
Înscris: 29.09.2008

Fetching version number of latest firmware... ok							   
> version : v2.0.9-hotfix.7												   
> url	 : https://fw-download.ubnt.com/data/e50/1e5e-edgerouter-2.0.9-hotfix.
7-7301a103f7624232be73b66df6e4a921.tar										 
> md5	 : a18c567694fa660417902f40b9910e63								  
> state   : can-upgrade

#513
filipac

Posted 14 August 2023 - 00:59

Junior Member

Grup: Members
Posts: 76
Înscris: 06.09.2011

@ogo:

Oare ce fac gresit. Din router ssh pot da ping6 google.com si vad ca merge ipv6, dar pe laptop (si wifi si cablu direct) nu ia un ipv6 si cand dau ping6 google.com imi da no route to host.

Config:

Spoiler

firewall {
all-ping enable
broadcast-ping disable
ipv6-name WANv6_IN {
	 default-action drop
	 description "WAN inbound traffic forwarded to LAN"
	 enable-default-log
	 rule 10 {
		 action accept
		 description "Allow established/related sessions"
		 state {
			 established enable
			 related enable
		 }
	 }
	 rule 20 {
		 action drop
		 description "Drop invalid state"
		 state {
			 invalid enable
		 }
	 }
}
ipv6-name WANv6_LOCAL {
	 default-action drop
	 description "WAN inbound traffic to the router"
	 enable-default-log
	 rule 10 {
		 action accept
		 description "Allow established/related sessions"
		 state {
			 established enable
			 related enable
		 }
	 }
	 rule 20 {
		 action drop
		 description "Drop invalid state"
		 state {
			 invalid enable
		 }
	 }
	 rule 30 {
		 action accept
		 description "Allow IPv6 icmp"
		 protocol ipv6-icmp
	 }
	 rule 40 {
		 action accept
		 description "allow dhcpv6"
		 destination {
			 port 546
		 }
		 protocol udp
		 source {
			 port 547
		 }
	 }
}
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name WAN_IN {
	 default-action drop
	 description "WAN to internal"
	 rule 10 {
		 action accept
		 description "Allow established/related"
		 state {
			 established enable
			 related enable
		 }
	 }
	 rule 20 {
		 action drop
		 description "Drop invalid state"
		 state {
			 invalid enable
		 }
	 }
}
name WAN_LOCAL {
	 default-action drop
	 description "WAN to router"
	 rule 10 {
		 action accept
		 description "Allow established/related"
		 state {
			 established enable
			 related enable
		 }
	 }
	 rule 20 {
		 action drop
		 description "Drop invalid state"
		 state {
			 invalid enable
		 }
	 }
}
options {
	 mss-clamp {
		 interface-type pppoe
		 mss 1452
	 }
	 mss-clamp6 {
		 interface-type pppoe
		 mss 1432
	 }
}
receive-redirects disable
send-redirects enable
source-validation disable
syn-cookies enable
}
interfaces {
ethernet eth0 {
	 description "Internet (PPPoE)"
	 duplex auto
	 pppoe 0 {
		 default-route auto
		 dhcpv6-pd {
			 pd 0 {
				 interface switch0 {
					 host-address ::1
				 }
				 prefix-length /64
			 }
			 rapid-commit disable
		 }
		 firewall {
			 in {
				 ipv6-name WANv6_IN
				 name WAN_IN
			 }
			 local {
				 ipv6-name WANv6_LOCAL
				 name WAN_LOCAL
			 }
		 }
		 ipv6 {
			 enable {
			 }
		 }
		 mtu 1492
		 name-server auto
		 password ****************
		 user-id AR257055893
	 }
	 speed auto
}
ethernet eth1 {
	 description Local
	 duplex auto
	 speed auto
}
ethernet eth2 {
	 description Local
	 duplex auto
	 speed auto
}
ethernet eth3 {
	 description Local
	 duplex auto
	 speed auto
}
ethernet eth4 {
	 description Local
	 duplex auto
	 poe {
		 output off
	 }
	 speed auto
}
loopback lo {
}
switch switch0 {
	 address 192.168.1.1/24
	 description Local
	 ipv6 {
		 router-advert {
			 cur-hop-limit 64
			 link-mtu 0
			 managed-flag false
			 max-interval 600
			 name-server 2606:4700:4700::1111
			 name-server 2001:4860:4860::8888
			 name-server 2620:fe::fe
			 other-config-flag false
			 prefix ::/64 {
				 autonomous-flag true
				 on-link-flag true
				 preferred-lifetime 2700
				 valid-lifetime 5400
			 }
			 reachable-time 0
			 retrans-timer 0
			 send-advert true
		 }
	 }
	 mtu 1500
	 switch-port {
		 interface eth1 {
		 }
		 interface eth2 {
		 }
		 interface eth3 {
		 }
		 interface eth4 {
		 }
		 vlan-aware disable
	 }
}
}
service {
dhcp-server {
	 disabled false
	 hostfile-update disable
	 shared-network-name LAN {
		 authoritative enable
		 subnet 192.168.1.0/24 {
			 default-router 192.168.1.1
			 dns-server 192.168.1.1
			 lease 86400
			 start 192.168.1.38 {
				 stop 192.168.1.243
			 }
		 }
	 }
	 static-arp disable
	 use-dnsmasq disable
}
dns {
	 forwarding {
		 cache-size 150
		 listen-on switch0
		 name-server 1.1.1.1
		 name-server 8.8.8.8
		 name-server 9.9.9.9
		 name-server 2606:4700:4700::1111
		 name-server 2001:4860:4860::8888
		 name-server 2620:fe::fe
	 }
}
gui {
	 http-port 80
	 https-port 443
	 older-ciphers enable
}
mdns {
	 reflector
}
nat {
	 rule 5010 {
		 description "masquerade for WAN"
		 outbound-interface pppoe0
		 type masquerade
	 }
}
ssh {
	 port 22
	 protocol-version v2
}
unms {
}
}
system {
analytics-handler {
	 send-analytics-report false
}
crash-handler {
	 send-crash-report false
}
host-name EdgeRouter-X-5-Port
login {
	 user ubnt {
		 authentication {
			 encrypted-password ****************
		 }
		 level admin
	 }
}
name-server 127.0.0.1
ntp {
	 server 0.ubnt.pool.ntp.org {
	 }
	 server 1.ubnt.pool.ntp.org {
	 }
	 server 2.ubnt.pool.ntp.org {
	 }
	 server 3.ubnt.pool.ntp.org {
	 }
}
offload {
	 hwnat enable
	 ipsec enable
}
syslog {
	 global {
		 facility all {
			 level notice
		 }
		 facility protocols {
			 level debug
		 }
	 }
}
time-zone UTC
}

#514
filipac

Posted 14 August 2023 - 01:34

Junior Member

Grup: Members
Posts: 76
Înscris: 06.09.2011

update: merge, noul config:

Spoiler

firewall {
all-ping enable
broadcast-ping disable
ipv6-name WANv6_IN {
		 default-action drop
		 description "WAN inbound traffic forwarded to LAN"
		 enable-default-log
		 rule 10 {
				 action accept
				 description "Allow established/related sessions"
				 state {
						 established enable
						 related enable
				 }
		 }
		 rule 20 {
				 action drop
				 description "Drop invalid state"
				 state {
						 invalid enable
				 }
		 }
}
ipv6-name WANv6_LOCAL {
		 default-action drop
		 description "WAN inbound traffic to the router"
		 enable-default-log
		 rule 10 {
				 action accept
				 description "Allow established/related sessions"
				 state {
						 established enable
						 related enable
				 }
		 }
		 rule 20 {
				 action drop
				 description "Drop invalid state"
				 state {
						 invalid enable
				 }
		 }
		 rule 30 {
				 action accept
				 description "Allow IPv6 icmp"
				 protocol ipv6-icmp
		 }
		 rule 40 {
				 action accept
				 description "allow dhcpv6"
				 destination {
						 port 546
				 }
				 protocol udp
				 source {
						 port 547
				 }
		 }
}
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name WAN_IN {
		 default-action drop
		 description "WAN to internal"
		 rule 10 {
				 action accept
				 description "Allow established/related"
				 state {
						 established enable
						 related enable
				 }
		 }
		 rule 20 {
				 action drop
				 description "Drop invalid state"
				 state {
						 invalid enable
				 }
		 }
}
name WAN_LOCAL {
		 default-action drop
		 description "WAN to router"
		 rule 10 {
				 action accept
				 description "Allow established/related"
				 state {
						 established enable
						 related enable
				 }
		 }
		 rule 20 {
				 action drop
				 description "Drop invalid state"
				 state {
						 invalid enable
				 }
		 }
}
options {
		 mss-clamp {
				 interface-type pppoe
				 mss 1452
		 }
		 mss-clamp6 {
				 interface-type pppoe
				 mss 1432
		 }
}
receive-redirects disable
send-redirects enable
source-validation disable
syn-cookies enable
}
interfaces {
ethernet eth0 {
		 description "Internet (PPPoE)"
		 duplex auto
		 pppoe 0 {
				 default-route auto
				 dhcpv6-pd {
						 pd 0 {
								 interface switch0 {
										 host-address ::1
								 }
								 prefix-length /64
						 }
						 rapid-commit disable
				 }
				 firewall {
						 in {
								 ipv6-name WANv6_IN
								 name WAN_IN
						 }
						 local {
								 ipv6-name WANv6_LOCAL
								 name WAN_LOCAL
						 }
				 }
				 ipv6 {
						 enable {
						 }
				 }
				 mtu 1492
				 name-server auto
				 password ****************
				 user-id AR257055893
		 }
		 speed auto
}
ethernet eth1 {
		 description Local
		 duplex auto
		 speed auto
}
ethernet eth2 {
		 description Local
		 duplex auto
		 speed auto
}
ethernet eth3 {
		 description Local
		 duplex auto
		 speed auto
}
ethernet eth4 {
		 description Local
		 duplex auto
		 poe {
				 output off
		 }
		 speed auto
}
loopback lo {
}
switch switch0 {
		 address 192.168.1.1/24
		 description Local
		 ipv6 {
				 router-advert {
						 cur-hop-limit 64
						 link-mtu 0
						 managed-flag false
						 max-interval 600
						 name-server 2606:4700:4700::1111
						 name-server 2001:4860:4860::8888
						 name-server 2620:fe::fe
						 other-config-flag false
						 prefix ::/64 {
								 autonomous-flag true
								 on-link-flag true
								 preferred-lifetime 2700
								 valid-lifetime 5400
						 }
						 reachable-time 0
						 retrans-timer 0
						 send-advert true
				 }
		 }
		 mtu 1500
		 switch-port {
				 interface eth1 {
				 }
				 interface eth2 {
				 }
				 interface eth3 {
				 }
				 interface eth4 {
				 }
				 vlan-aware disable
		 }
}
}
service {
dhcp-server {
		 disabled false
		 hostfile-update disable
		 shared-network-name LAN {
				 authoritative enable
				 subnet 192.168.1.0/24 {
						 default-router 192.168.1.1
						 dns-server 192.168.1.1
						 lease 86400
						 start 192.168.1.38 {
								 stop 192.168.1.243
						 }
				 }
		 }
		 static-arp disable
		 use-dnsmasq disable
}
dns {
		 forwarding {
				 cache-size 150
				 listen-on switch0
				 name-server 1.1.1.1
				 name-server 8.8.8.8
				 name-server 9.9.9.9
				 name-server 2606:4700:4700::1111
				 name-server 2001:4860:4860::8888
				 name-server 2620:fe::fe
		 }
}
gui {
		 http-port 80
		 https-port 443
		 older-ciphers enable
}
mdns {
		 reflector
}
nat {
		 rule 5010 {
				 description "masquerade for WAN"
				 outbound-interface pppoe0
				 type masquerade
		 }
}
ssh {
		 port 22
		 protocol-version v2
}
unms {
}
}
system {
analytics-handler {
		 send-analytics-report false
}
crash-handler {
		 send-crash-report false
}
host-name EdgeRouter-X-5-Port
login {
		 user ubnt {
				 authentication {
						 encrypted-password ****************
				 }
				 level admin
		 }
}
name-server 127.0.0.1
ntp {
		 server 0.ubnt.pool.ntp.org {
		 }
		 server 1.ubnt.pool.ntp.org {
		 }
		 server 2.ubnt.pool.ntp.org {
		 }
		 server 3.ubnt.pool.ntp.org {
		 }
}
offload {
		 hwnat enable
		 ipsec enable
}
syslog {
		 global {
				 facility all {
						 level notice
				 }
				 facility protocols {
						 level debug
				 }
		 }
}
time-zone UTC
}

#515
ogo

Posted 14 August 2023 - 01:59

Senior Member

Grup: Senior Members
Posts: 4,537
Înscris: 07.03.2006

Ai uitat sa delegi prefix id-ul pe interfata lan (switch0) si dup-addr-detect pe pppoe0 si lan.
Ia incearca:

configure
set interfaces ethernet eth0 pppoe 0 dhcpv6-pd pd 0 interface switch0 prefix-id ‘:1’
set interfaces ethernet eth0 pppoe 0 ipv6 dup-addr-detect-transmit 1
set interfaces switch switch0 ipv6 dup-addr-detect-trasmit 1
commit
save
exit

Completeaza sintaxa comenzii cu tasta [TAB] posibil sa fi gresit spelling-ul

Update
Noul config nu se vede clar/complet din cauza formatarii forumului sau cum ai dat tu paste.

#516
ovidiuvio

Posted 18 August 2023 - 12:40

Junior Member

Grup: Members
Posts: 45
Înscris: 18.10.2008

Salut,

Caut un replacement mai puternic pentru edgerouter-x care sa ofere un set similar de functii / flexibilitate:
-advanced routing functions ( folosesc bgp acum )
-wireguard/zerotier/sd-wan support
-vpn throughput > 300mbps
-dhcp management avansat
-storage:1gbyte +
-ram:500-1gb+
-optional: ipv6 gui support
-nice to have: cloud/controller management, 2.5gbps/10gbps ports
< 1000EUR

In momentul de fata, iau in calcul urmatoarele variante:

- edgerouter 4 sau 6p
- Flint (GL-AX1800)
- Flint 2 (GL-MT6000)
- mikrotik hap ax3

Aveti ceva recomandari ?

@ogo ?

#517
me_iauras

Posted 18 August 2023 - 15:56

Senior Member

Grup: Senior Members
Posts: 2,379
Înscris: 08.01.2009

1 or 2 cu pfSense/OpenSense dupa preferinta .

#518
ogo

Posted 18 August 2023 - 19:17

Senior Member

Grup: Senior Members
Posts: 4,537
Înscris: 07.03.2006

Pt ce storage?
Si ce vpn pt 300 mbps? Wireguard?
Dintre cele enumerate er-4 dar iti trebuie si un switch daca vi de la er-x (asta ca nu exista sau e f mic learning curve-ul intre
mediatek -erx- si cavium -er4/6-).

#519
ovidiuvio

Posted 18 August 2023 - 19:32

Junior Member

Grup: Members
Posts: 45
Înscris: 18.10.2008

Buna asta cu switchul. Ratasem complet ca ER-4 nu are L2 switch.
Pentru VPN: Wireguard
Storage: Pentru pachete custom: netbird (wireguard), zerotier + logs. (da, nu ocupa chiar asa mult dar pe edgerouter x e problematic sa descarci arhive un pic mai mari si sa le dezarhivezi )

Alta optiune mai buna ? (nu imi pasa de learning curve)

Edited by ovidiuvio, 18 August 2023 - 19:33.

#520
ogo

Posted 19 August 2023 - 13:06

Senior Member

Grup: Senior Members
Posts: 4,537
Înscris: 07.03.2006

Am trecut si eu prin dilema asta (aveam un isp ce oferea un subnet ipv6 fix si vroiam sa-l deleg via pd downstream si din pacate edgerouter nu stie dhcpv6pd-server dar am rezolvat cu dhcpv6 simplu pt o perioada pana cand am trecut la RDS) si atunci ma “orientasem” spre mikrotik nou (ceva cu 10/25 Gbps) sau juniper second de pe ebay (USA).
Personal sunt ‘atras’ de CLI, via GUI nu prea vezi/intelegi ce “lucreaza” sistemul in spate fara sa “sapi” intens…

#521
wolfydRg

Posted 24 August 2023 - 09:12

Senior Member

Grup: Senior Members
Posts: 7,025
Înscris: 20.06.2005

Cred ca ala micu de "ruteaza" la greu , aka routerul din topic sa busit. I-am dat reseturi peste reseturi, raspunde doar la ping 192.168.1.1 , dar nu am acces la interfarta.
Exista vreo solutie sa ma leg la ea si sa rescriu firmware ?

Daca e busit fara remediere cer un sfat lui @ogo.
Pentru ca am un server ce sta sus 24/24 parca mi-as lua asa ceva : https://www.senetic....duct/629135-B22
Si ii pun partea de rutare/firewall ... pe server. Ceva sfaturi ?
Oricum sta sus acel server(momentan linux server Debian cu multiple vm / Arch in caz de nevoie) non stop, de ca sa-l tin degeaba si sa nu-l pun la treaba si pe partea asta. Recomandări ?

Edited by wolfydRg, 24 August 2023 - 09:24.

#522
ogo

Posted 24 August 2023 - 09:30

Senior Member

Grup: Senior Members
Posts: 4,537
Înscris: 07.03.2006

Ssh merge?
Daca nu si nu:
https://help.ui.com/...r-TFTP-Recovery

Anunturi

Second Opinion

Folosind serviciul second opinion ne puteți trimite RMN-uri, CT -uri, angiografii, fișiere .pdf, documente medicale.

Astfel vă vom putea da o opinie neurochirurgicală, fără ca aceasta să poată înlocui un consult de specialitate. Răspunsurile vor fi date prin e-mail în cel mai scurt timp posibil (de obicei în mai putin de 24 de ore, dar nu mai mult de 48 de ore). Second opinion – Neurohope este un serviciu gratuit.

www.neurohope.ro

Back to Networking

▶ 0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

© 2001-2024 Softpedia. All rights reserved. Softpedia® and the Softpedia logo are registered trademarks of SoftNews Net SRL.
Ora implicita a Forumului Softpedia este ora standard a Romaniei (GMT+2). Mai multe informatii →
⚠ Postarile afisate pe Forumul Softpedia reprezinta o opinie subiectiva a membrilor care le-au publicat si nu a SoftNews Net SRL.

EdgeRouter X - Ubiquiti - (ER X)

#505 ogo Posted 14 April 2023 - 17:07

#506 PeRuZzI Posted 14 April 2023 - 17:24

Attached Files

#507 ogo Posted 15 April 2023 - 02:49

#508 PeRuZzI Posted 15 April 2023 - 21:15

#509 Bennedict Posted 10 May 2023 - 13:18

#510 ogo Posted 10 May 2023 - 13:46

#511 Bennedict Posted 10 May 2023 - 13:56

#512 Bennedict Posted 07 July 2023 - 19:38

#513 filipac Posted 14 August 2023 - 00:59

#514 filipac Posted 14 August 2023 - 01:34

#515 ogo Posted 14 August 2023 - 01:59

#516 ovidiuvio Posted 18 August 2023 - 12:40

#517 me_iauras Posted 18 August 2023 - 15:56

#518 ogo Posted 18 August 2023 - 19:17

#519 ovidiuvio Posted 18 August 2023 - 19:32

#520 ogo Posted 19 August 2023 - 13:06

#521 wolfydRg Posted 24 August 2023 - 09:12

#522 ogo Posted 24 August 2023 - 09:30

Anunturi

▶ 0 user(s) are reading this topic

Sign In

#505
ogo

Posted 14 April 2023 - 17:07

#506
PeRuZzI

Posted 14 April 2023 - 17:24

#507
ogo

Posted 15 April 2023 - 02:49

#508
PeRuZzI

Posted 15 April 2023 - 21:15

#509
Bennedict

Posted 10 May 2023 - 13:18

#510
ogo

Posted 10 May 2023 - 13:46

#511
Bennedict

Posted 10 May 2023 - 13:56

#512
Bennedict

Posted 07 July 2023 - 19:38

#513
filipac

Posted 14 August 2023 - 00:59

#514
filipac

Posted 14 August 2023 - 01:34

#515
ogo

Posted 14 August 2023 - 01:59

#516
ovidiuvio

Posted 18 August 2023 - 12:40

#517
me_iauras

Posted 18 August 2023 - 15:56

#518
ogo

Posted 18 August 2023 - 19:17

#519
ovidiuvio

Posted 18 August 2023 - 19:32

#520
ogo

Posted 19 August 2023 - 13:06

#521
wolfydRg

Posted 24 August 2023 - 09:12

#522
ogo

Posted 24 August 2023 - 09:30