BGP Flaps after CQBuf error
I just had a bunch of BGP flaps, I think right after the router received a bunch of updates from it's upstream (two full feeds). Here's the logs:Feb 7 23:17:56 rtr1 BGP[890]: BGP-3:...
View ArticleRe: So frustrated with Hairpin NAT
In a moment of desperation to try something new I did set up a BIND server to use Split DNS, but we still have an issue where Mail in a Box, for example, can't generate its Let's Encrypt certs and...
View ArticleRe: So frustrated with Hairpin NAT
I don't use LE, so maybe someone else can comment on that. I use ssls.com, $15 for 3 years.
View ArticleRe: So frustrated with Hairpin NAT
For whatever reason giving them hostnames didn't work - that was actually the first place I started. I must be extra dense because I've read that same article 1000 times and followed every step and...
View ArticleRe: So frustrated with Hairpin NAT
"With duplicating a dNAT rule I meant copy the entire rule, and only change incoming interface to one of inside interfaces. (instead of incoming interface =eth0 , using generic eth+ might also work...
View ArticleRe: Commit failed, then -> 'RTNETLINK answers: File exists'
root@rtr1:~# ip link del bond0.214 That seems to have fixed it. Not sure what ubnt has to say about this method, but #worksforme
View ArticleRe: ER8Pro BGP-6: %BGP-5-ADJCHANGE: neighbor Down Interface Flap
Did you know which neighbors came down? And did those routes to those neighbors change before/after radio got connected?
View ArticleRe: Simple Dual WAN w/ fail-over - how to change IP address properly?
Ok here's what I got:WAN 1 - eth0 - XX.XX.198.218/30 (working)Routing entry #1:Automatic entry (can't edit at all)Destination = XX.XX.198.216/30Next Hop = blankInterface = eth0Route Type =...
View ArticleRe: The number does not add up.
From the point of view of a consumer with traffic volume cap, knowing the traffic volume to/from to the router is more important since he/she does not want exceed the cap. A better way to address...
View ArticleRe: The number does not add up.
Most ISPs charge you for the traffic you created that is then leaving their network (e.g. to Netflix). They're not (necessarily) going to include internal traffic / broadcasts that are necessary to...
View ArticleClik here to view.
Re: DPI with Zone-based Firewall?
I'm not exactly sure when but at some point it did start working. I think it might have been after another reboot. Further changes to the ruleset applying DPI are now reflected instantly. As my rule...
View ArticleRe: Firewalling OpenVPN Site-to-Site
No change. All hosts on B (also including ERL-B) are able to ping all hosts on A. Watching the log, I can see the ping packets get picked up for VTUN1_LOCAL, but for VTUN1_IN, there is nothing, and the...
View ArticleRe: Simple Dual WAN w/ fail-over - how to change IP address properly?
Post your config "show configuration | cat" then post actual routing table "show ip route main" sanitize were necessary put in a code block wrapped in a spoiler tag
View ArticleRe: Simple Dual WAN w/ fail-over - how to change IP address properly?
and post results of "show load-balance status" "show load-balance watchdog"
View ArticleRe: Firewalling OpenVPN Site-to-Site
Why do you have remote-host on both sides? Try removing it from ER A. And also how about removing local-address on both sides.
View ArticleRe: EdgeRouter Pro 8 - Bonding.
Disabling hardware offload would effect the bandwidth. you would go from a 1gb throughput to probably less then 500Mb throughput.
View ArticleRe: So frustrated with Hairpin NAT
mcblum wrote:"With duplicating a dNAT rule I meant copy the entire rule, and only change incoming interface to one of inside interfaces. (instead of incoming interface =eth0 , using generic eth+...
View Article2 dhcp servers off the same interface.
I have a netowrk set up with an edge router, 2 switchs, and a Wireless AP. The problem I'm having is that I want to have the ethernet network on 1 subnet and the wireless devices on 2nd subnet. I have...
View ArticleRe: So frustrated with Hairpin NAT
I got it working, sort of. But the problem I see is that I cant have two servers on the LAN running on the same port. It works fine externally but inside, no. It seems like the solutions being talked...
View Article
