Re: ERX Wifi vlan routed to VPN connection
You should use something likeset interfaces switch switch0 vif XX firewall in modify express_vpn_routeOnce the firewall modify ruleset has been correctly created ..Cheers,jonatha
View ArticleRe: EdgeRouter X/X-SFP check bootloader version
That's correct, the units that ship with the updated bootloader from the factory show: 828a6788a539809103bd42d121634211 /dev/mtdblock2 I have updated the bootloader blog post with more details to...
View ArticleClik here to view.
Re: Hairpin NAT issues
wrote:For the NAT rules, switch0 isn't your LAN interface , switch0.1 isSo, if your theory is correct, then this should work:I just changed that, and asked the client to test again.Makes sense, since...
View ArticleRe: VOIP issues
wrote:ER-PoE5 won't be able to do QoS at 100Mb/sIf you end up with 100% CPU, you might be better off without QoS I normally set QoS bandwidth at 85...90% of link speed.Thanks, I'll give this a try now.
View ArticleClik here to view.
Re: Question about OpenVPN instructions in UBNT help
By default, is in routed mode, with its own address space, but, what you ask...yes, it is possible (even if personally I hate the software bridges ... )Take a look here.Cheers,jonatha
View ArticleRe: ER8Pro dropping SIP packets
Thank you very much! What is the purpose of the SIP conntrack helper? If it is needed to keep track of the ports in use so that the firewall doesn't get in the way, I might need it. I'll try it...
View ArticleRoute based site-to-site vpn edgerouter 8pro x2 not able to establish
Scenario:Edgerouter 8pro <-> Edgerouter 8proroute based site-to-site ipsec vpnmultiple ourside IPs on both sides Unable to establish vti connection.always wants to use the 'default' outbound IP...
View ArticleRe: Hairpin NAT issues
switch0 is hardware , bridge0 is software. so use switch0.1 for vlan1I normally use CLI, and checked GUI: All my VLANs on switch0 are available on both port forward and nat tab
View ArticleRe: Route based site-to-site vpn edgerouter 8pro x2 not able to establish
Add /32 routes for ipsec peer IP, to force VPN to use proper WAN link
View ArticleRe: ER8Pro dropping SIP packets
SIP helper aims at allowing SIP (and RTP) through NAT...but for most devices it isn't needed, and the helper only makes matters worse
View ArticleRe: Route based site-to-site vpn edgerouter 8pro x2 not able to establish
So... peer IP/32 { local address IP/32? commit failed.
View ArticleRe: Hairpin NAT issues
wrote:switch0 is hardware , bridge0 is software. so use switch0.1 for vlan1I normally use CLI, and checked GUI: All my VLANs on switch0 are available on both port forward and nat tabWell, I have to...
View ArticleRe: Route based site-to-site vpn edgerouter 8pro x2 not able to establish
Use:set vpn ipsec site-to-site peer REMOTE_WAN_IP local-address DESIRED_LOCAL_WAN_IP Like this: set vpn ipsec site-to-site peer 176.103.28.141 local-address 73.93.218.40
View ArticleRe: Route based site-to-site vpn edgerouter 8pro x2 not able to establish
At site A:set protocols static route 157.x.x.63/32 next-hop 12.x.x.233
View ArticleRe: NAT Reflection between eth1 and eth3
I don't have a dNAT rule for eth0, how are these supposed to be configured between source/destination/translation?
View ArticleRe: Route based site-to-site vpn edgerouter 8pro x2 not able to establish
I do have that (Peer and Local). But also..I'm not using a policy based configuration but rather route based. My first objective is to get the site-to-site connection before I even bother with the...
View ArticleRe: Support for g.fast SPF
Well binwalk tells me that it is basically a big endian JFFS2 file system. So that suggests unsurprisingly that it's a MIPS device. Had to install Jefferson to extract the JFFS2 file system. Poking...
View ArticleRe: NAT Reflection between eth1 and eth3
Something like: set service nat rule 10 description Reflectionset service nat rule 10 destination address 98.x.x.x.set service nat rule 10 destination port 80set service nat rule 10 inbound-interface...
View ArticleRe: NAT Reflection between eth1 and eth3
Ah okay, that is correct, I already added them as LAN interfaces.
View Article