Re: IPSec VPN Tunnel w/ PSK in Aggressive Mode
Frist add:set vpn ipsec esp-group FOO0 mode tunnelYou might also try:set vpn ipsec disable-uniqreqids There is also a guide here for setting up VPN between EdgeRouter and Sonicwall.
View ArticleLost web GUI access (overwrote server.pem)
In the process of trying to generate and install a fully valid SSL certificate, I overwrote my existing server.pem with a non-functioning certificate. Unfortunately, I didn't back it up first (lesson...
View ArticleRe: Edge Router Lite - Port Forwarding with 2 routers- not working...
This is similar to my setup, but instead of just a single pc being accessible from the wan, I want the whole range.pretty sure it is something to do with our WAN firewall settings not allowing IN...
View ArticleBest way to remote access Edge router X 1.9.0
Hi folks ,Im trying to find the quickest way to remote access my edge router X v1.9.0 and for future use, the safest way.
View ArticleRe: ERPoE‑5, poor performance
:~$ show ubnt offload IP offload module : loaded IPv4 forwarding: enabled vlan : enabled pppoe : disabled gre : disabled IPv6 forwarding: enabled vlan : enabled pppoe : disabled IPSec offload module:...
View ArticleRe: ERPoE‑5, poor performance
I did some digging and apparently the CPU load peaks at a steady 100%, so something drops the offloading.
View ArticleRe: L2TP IPsec + FreeRADIUS + Google Authenticator
Thanks Jordan for the command! Changing to PAP solved my issue! That'll be awesome if Ubiquiti can change the requirement of creating local account when pointing to RADIUS server. A lot of networking...
View ArticleRe: BGP peering + NAT/PAT on Edgemax Pro
You could try adding public IPs to your WAN interface, so BGP has interface IP/network to advertise. Alternatively, add a null-route to your own private range, and redistribute static
View ArticleRe: ER-L static route not followed
What does your tunnel config look like?On legacy site2site IPSEC VPN the tunnel definition itself configures which traffic is sent over the VPN, you can't manually add routes to it. otoh, VTI IPSEC...
View ArticleRe: BGP peering + NAT/PAT on Edgemax Pro
the advertising is not the problem, how can I use one of the public ip address that I advertise via BGP for NAT/PAT? The router that advertised the public ip via BGP is the same router that has to do...
View ArticleRe: IPSec VPN Tunnel w/ PSK in Aggressive Mode
Reviewing your post, I enter "remove everything I haven't seen before" mode:On Sonic, I'd set IKE local and remote ID to public addresses.On ER, I'd get rid , under peer , authentication , get rid of...
View ArticleRe: Lost web GUI access (overwrote server.pem)
Follow guide below:https://community.ubnt.com/t5/EdgeMAX/How-to-install-a-Valid-Certificate-on-the-ER-version-1-8-5-and/m-p/1634622
View ArticleRe: Edge Router Lite - Port Forwarding with 2 routers- not working...
NAT after NAT should work, port mapping require require to be set on both NAT devices in tandem....like you're doing. Should work from outside...but are you testing from LAN1 ??If so either connect to...
View ArticleRe: ERPOE over 100% CPU
RedLink_Juan wrote:I have over 100% CPU use according to this, any recommendation on what to do? Tasks: 117 total, 5 running, 92 sleeping, 0 stopped, 20 zombie %Cpu(s): 38.1 us, 56.9 sy, 0.0 ni, 0.0...
View ArticleRe: EdgeRouter Lite v1.7.0 DHCP Option
No...it didn't work... I changed this router for a Cisco router and...all works fine.
View ArticleRe: Edgerouter PoE 5
ok so I have an update. The router has crashed 3 times today and managed to get the console cable logging to see what happened before the crash and I got this [20161122 12:08:49.248] ERROR[18816]...
View ArticleRe: Backup IPsec over failover WAN
- would you have any ideas how to write the arguments specific to DDNS updates in my wlb / ipsec transition script?
View ArticleClik here to view.
Re: Support for BGP Large communities
Have you read the site? Large communities is about community-support for 32bits ASN's, which is new.
View ArticleRe: edgeOS 1.8.5 | ribd uses much CPU
Any news on 2.0? I've got two edgerouters doing NAT for some clients, and both are using OSPF and iBGP between loopbacks (so +1 hop) to get to the rest of our network. After a few hours of uptime,...
View Article
