Outline ·
[ Standard ] ·
Linear+
[OFFICIAL] Ubiquiti Networks, Home/SOHO/Enterprise Networking
|
rjb123
|
 Dec 29 2016, 06:12 PM
|
|
Got ER-Lite yesterday and setup within 10 minutes, all running fine.
OpenVPN site-to-site VPN setup to ER-8 sitting in UK office, working without issues (had Windows 10 drop L2TP VPN every couple of hours before - hence taken this approach)
Now I've set up the VPN I'd like to block some of the traffic as I only really need to have connection to the NVR for CCTV and RDP into a couple of machines. Also, the ER-8 side doesn't need access to any devices in my internal network.
Is there an easy way to set this up, or just a bunch of custom firewall rules? Previously only used client to site VPN so that was a little easier.
|
|
|
|
|
|
rjb123
|
Dec 29 2016, 09:49 PM
|
|
|
QUOTE(pandera999 @ Dec 29 2016, 09:20 PM)  this more likely firewall rules Yeah guess I'll have to put rules to block all traffic between 2 sites then add rules for the few where I want to allow traffic for RDP/CCTV Thought there might be an easier way that's all. |
|
|
|
|
|
rjb123
|
Jan 15 2017, 03:32 PM
|
|
|
I've been using EdgeRouter Lite for a few weeks now and it's fantastic - not a single hiccup
Been running with a constant OpenVPN site-to-site tunnel to my office in UK (on an ER-8) and it hasn't dropped the connection once. Using L2TP before and I was getting drops more often (which I suspect were related to my NIC)
Don't regret the purchase one bit! Now just need to figure out how to setup a Client-to-Site OpenVPN for when I'm travelling next month.
|
|
|
|
|
|
rjb123
|
Jan 15 2017, 06:58 PM
|
|
|
QUOTE(pandera999 @ Jan 15 2017, 05:36 PM) im still having problem with vpn... i hate it... it works previously suddenly not working  To be honest the setup was a bit more hassle as had to use CLI rather than GUI, but after working no problems at all. Did you have a look at the logs? Might shed some light as to why it's not working |
|
|
|
|
|
rjb123
|
Jan 17 2017, 09:47 AM
|
|
|
QUOTE(tezro @ Jan 17 2017, 09:42 AM) Hi bro, May i know where did you buy your EdgeRouter Lite? In Malaysia? I'm planning to buy one unit.  The company from the first post in here in Subang Empire |
|
|
|
|
|
rjb123
|
Jan 17 2017, 10:16 AM
|
|
|
QUOTE(tezro @ Jan 17 2017, 10:11 AM) How do you purchase the router? Walk-in to the office or they ship it to your home using courier? Sorry bro. Too much asking question.  I collected it, but yeah they do use couriers too. Actually I was planning to buy it online initially as they're much cheaper overseas but being network equipment would probably negate those savings are paying for SIRIM. |
|
|
|
|
|
rjb123
|
Jan 17 2017, 11:18 AM
|
|
|
QUOTE(tezro @ Jan 17 2017, 10:28 AM) Alright. Thank you. I'm also thinking to buy this router from oversea but somehow i think better buy it locally.  Overseas is much cheaper - the box even states "less than $100" But if I was to import shipping would be around $20 USD, and SIRIM agent as I don't have time to do it myself would cost another RM200. In the end the price will work out the same, so makes sense to get it locally. |
|
|
|
|
|
rjb123
|
Jan 17 2017, 02:44 PM
|
|
|
QUOTE(wanttotree @ Jan 17 2017, 02:41 PM) Thank you for sharing yr experience. In my case its a little different. I ordered my erl from latvia and i collected it without sirim. Took a week to arrive to my house. That was around 6months ago. (Am i lucky?) And then, a week ago i ordered a ccr router from poland, dhl called me 2 days after shipment saying that i need sirim for it. I told them that it wasnt a wifi router and told them to send it to me asap. Then what do u know. They sent it to me a day later. Again without sirim(lucky again?). In my understanding, u dont need sirim for wired router, but u need sirim for radio related product such as wifi ap. Am i wrong? Im here to share my experience, someone maybe have a clearer understanding about sirim approvals. Not sure actually what the official rules for SIRIM are - I just tend to avoid importing networking related items just in case as often the saving isn't enough to justify. Sometimes you do get lucky - I imported iPhones a few times, and once they went through without needing SIRIM. |
|
|
|
|
|
rjb123
|
May 28 2018, 04:44 PM
|
|
|
QUOTE(pizzaboyj @ May 28 2018, 02:58 PM) thanks but cant the ERX also be managed from the controller as well? only thing is the cloudkey which makes it not necessary to have your own vm with the controller instance I’m using ER-3 which afaik can’t be managed from the Unifi controller. But to be honest I don’t see this as an issue for a small home network. I have 2 APs (AC-Pro) which I haven’t bothered using the controller for since initial setup, and ER-3 is configured through the web interface. For a normal home network (2 NAS, 3 desktops, few tablets and mobile devices, 1 laptop) I couldn’t ask for more and don’t have any issues. I have a constant VPN tunnel running to office in UK (OpenVPN to a pair of ER-8) which is very reliable and I don’t recall it ever needing maintenance in the last year or so. |
|
|
|
|
|
rjb123
|
May 28 2018, 08:17 PM
|
|
|
QUOTE(pizzaboyj @ May 28 2018, 06:47 PM) yeah i think USG is overkill for me. maybe somewhere down the line. unified config interface is nice to have, but not a needed to start out my current lineup looks like this: ERX UAP-AC-IW --> Desktop via Gigabit UAP-AC-IW --> HTPC via Gigabit APs will serve the mobiles and tablets Though I did come across the nanoHD which may have a wider range due to the higher Tx power on both 2.4GHz/5GHz compared to AC Pro, sadly doesnt look like its available yet Ah I’ve not faced any issues with WiFi speed to be honest - only high bandwidth usage I have is streaming 1080P content to iPad which works without issues. I only stream 4K to TV, but that’s connected by cable anyway - so not looking at doing any WiFi upgrades (for now!) It works solidly all the time without needing rebooting or any changes - so if it’s not broken I won’t touch it |
|
|
|
|
|
rjb123
|
Jul 8 2018, 04:51 PM
|
|
|
Ordered a USG-PRO-4 and UAP-AC-HD today and a few other bits (including a 1U UPS and 9U rack, which I’m sure GF will be delighted at, lol)
|
|
|
|
|
|
rjb123
|
Jan 30 2019, 03:21 PM
|
|
|
QUOTE(MX510 @ Jan 29 2019, 06:41 PM) Just want to share my latest installation Ubiquiti and Mikrotik Customer don't want the rack this is the best we can do Mikrotik RB1100ahx4 , Ubiquiti 500W POE Switch , UniFi Cloud Key , UniFi NVR , All Cat 6 [attachmentid=10174777] UniFi AC HD x 3 [attachmentid=10174778] [attachmentid=10174779] UVC G3 Camera x 8 [attachmentid=10174780] [attachmentid=10174782] Can view via apps through your phone for NVR Network is link to cloud key Maxis Fibre 100 Mbps upload and Download Did you have any issues with your CloudKey? I've totally given up on mine as it was constantly crashing. Never stayed up more than a few days. Installed the controller on Synology NAS instead and that's been rock solid. |
|
|
|
|
|
rjb123
|
Jan 31 2019, 12:16 AM
|
|
|
QUOTE(MX510 @ Jan 30 2019, 06:50 PM) Did you upgrade to latest firmware? So far no issues [attachmentid=10175352] All system up and running Last reboot was due to power failure TNB maintenance [attachmentid=10175353] Yup was using the Gen 1 ... latest firmware and kept crashing so decided to give up and moved to NAS. Can’t really return it either as bought on Amazon , shipping it back wouldn’t be worth the hassle Mine always stopped working after 1-2-3 days |
|
|
|
|
|
rjb123
|
Jan 31 2019, 05:37 AM
|
|
|
QUOTE(wanttotree @ Jan 31 2019, 12:18 AM) Could it be the sd card failing? No idea, it’s possible. Anyway if I knew setting it up on NAS was so easy I probably wouldn’t have bothered buying a CloudKey anyway , considering that the NAS is running all day anyway. |
|
|
|
|
|
rjb123
|
Oct 16 2023, 12:52 AM
|
|
|
Looks like my USG PRO 4 is at the end of it's life  turns off by itself after 20 minutes or so. Been running 24/7 for quite a few years. Not sure where to start troubleshooting, I've tried to factory reset / adopt it to Synology controller and it died again half way through. Tried to connect to power directly instead of UPS, still same .. dies again soon after. Switched back to the Unifi supplied D-Link router for now ... |
|
|
|
|
Quote
0.0539sec
0.22
7 queries
GZIP Disabled