I'm going to give both of those a try.
Notably, though, it turns out that the "ubnt" ERL lost all internet connectivity for the hosts in the 192.168.2.0/24 network. I was still able to access the web interface from both sides (across the WAN and internally form 192.168.2.0/24), but something messed up... not sure if it was routing, NAT, or something else. I didn't have time to investigate since the system was down. Just thought I'd throw out my datapoint that this feature seems to be flaky at best, and disrupts other functionality of the ER line at worst.