Edge Router Lite Essential Configuration Guide

8/18/2019 Edge Router Lite Essential Configuration Guide

1/12

UBIQUITI EDGE ROUTER LITE (ERL) ESSENTIAL CONFIGURATION GUIDE

Low Y ZongVIEWQWEST PTE LTD 200 Bukit Timah Road Singapore 229862

UBIQUITI EDGE ROUTER LITE(ERL) ESSENTIAL

CONFIGURATION GUIDE


2/12


1March 18, 2016

Case Scenerio Public WAN & LAN IP Details:-WAN Subnet ID: 202.78.78.0/30

WAN Usable IP: 202.78.78.2

WAN Gateway: 202.78.78.1

WAN Broadcast: 202.78.78.3

WAN Subnet Mask: 255.255.255.252

LAN Subnet ID: 202.66.66.0/29

LAN Usable IP: 202.66.66.2 - 202.66.66.6

LAN Gateway: 202.66.66.1

LAN Broadcast: 202.66.66.7

LAN Subnet Mask: 255.255.255.248

Private LAN IP Detials:-

LAN Subnet ID: 192.168.2.0/24LAN Usable IP: 192.168.2.2 - 192.168.2.254

LAN Gateway: 192.168.2.1

LAN Broadcast: 192.168.2.255

LAN Subnet Mask: 255.255.255.0

DHCP Service Requirement:-DHCP Pool Size: 90

IP Reservation: 192.168.2.2 - 192.168.2.10

DHCP Start IP: 192.168.2.11

DHCP End IP: 192.168.2.100

DNS Details:-DNS Server 1: 202.73.37.3

DNS Server 2: 202.73.37.11

Standardized ERL Interface Port configuration ETH0

Local device management port

The interface connect to the PC use for router configuration

No Internet access is needed

With Default IP Address 192.168.1.1, the IP can be changed manually.

ETH1 LAN Port

Public/Private LAN IP

The interface connect to CPE

Will have internet access once the correct configuration has been done

ETH2

WAN Port

Public WAN IP

The interface connect to ViewQwest Modem

Will have internet access once the correct configuration has been done


3/12


2March 18, 2016

1. Configure static IP on your PC :-IP Address: 192.168.1.10

Subnet Mask: 255.255.255.0

Gateway: 192.168.1.1

2. Connect to your PC to Port 0 (Management Port) of Edge Router Lite

Try ping to 192.168.1.1 from Command Prompt (Windows) / Terminal (MAC) to check the

connectivity between your PC to ERL is reachable.

3. Open Internet Browser, type in 192.168.1.1 to launch the user interface of Edge Router Lite


4/12


3March 18, 2016

4. Login to Edge Router Lite by using the credential below:-

Default Username: ubnt

Default Password: ubnt

REMEMBER to TICK “I agree to the terms of this License Agreement”

Then click Login

You will only see this page on BRAND NEW UNBOX Edge Router for the first time access

This is the normal login page


5/12


4March 18, 2016

Edge Router Lite User Interface

I. Firmware version of ERL

II. Graphic Port interface status

III. CPU/RAM Usage of ERL and system uptime

High CPU usage can cause network service intermittent

IV. Interface port description

V. Text based Port interface status

5. Configure WAN Port (The port connecting to the ViewQwest Modem)

I. Choose the eth2 as WAN port (Has been Standardised)

II. Action > Config , to enter the WAN IP details

III. Port description

IV. Enable the port

V. Manually define IP address (Static IP)

VI. WAN Usable IP Address with the prefixVII. If the subscription less than 100M, hardcode to 100/Full on both ERL and Modem else set to Auto.


6/12


5March 18, 2016

6. Configure LAN Port (The port connecting to the ViewQwest Modem)

I. Choose the eth1 as LAN port (Has been Standardised)

II. Action > Config , to enter the LAN IP details

III. Port description

IV. Enable the port

V. Manually define IP address (Static IP)

VI. Private LAN Gateway IP Address with the prefix

Optional if customer don’t need private LAN then skip this step

VII. Add IP

To add multiple LAN subnet (Public or Private IP)

VIII. Manually define IP address (Static IP)

IX. Public LAN Gateway IP Address with the prefix

X. Put it auto unless customer side request to hardcode or the Graphic Port interface status reflected as 100/half

then need to hardcode it to 100/full together with CPE (Router/Switch/Firewall)

XI. Save the LAN port config after double verify the setting


7/12


6March 18, 2016

7. Configure LAN Port (The port connecting to the ViewQwest Modem)

I. Routing Tab

II. Routes Tab

III. Add Static Route

Create the network default route back to WAN Gateway

IV. Select Gateway V. 0.0.0.0/0

all IP addresses on the local machine

VI. WAN Gateway IP

VII. Enable to route

VIII. Save the default static route config.

Internet Connection on Public WAN and Public LAN should be

working now! Test it!

But not sure how to test?

Request backend provisioner try to access or ping the ERL

Connect your PC to ETH2 (Configured LAN Port) and assign the one of the Public LAN

usable IP with the Subnet Mask and Gateway address of the Public LAN IP to your PC Perform ping test to google.com

Perform speed test to verify if the provisioned bandwidth is correct


8/12


7March 18, 2016

8. OPTIONAL: NAT

If not private LAN IP is needed, please skip this part!!

I. Firewall/NAT Tab

II. NAT Tab

III. Add Source NAT

To translate to private LAN IP to public IP

IV. Service Description

V. Enable the NAT function

VI. Configured WAN Interface – ETH2

VII. Use Masquerade

Translate the Private IP as WAN Usable IP

VIII. Enable the NAT log

IX. Allow the NAT function for all the network protocol

X. Subnet ID of the private LAN IP

XI. Save the NAT config


9/12


8March 18, 2016

9. OPTIONAL: DHCP

If not private LAN IP is needed, please skip this part!!

I. Service Tab II. DHCP Server Tab III. Add DHCP Server IV. DHCP Pool Name V. Subnet ID of the private LAN IP VI. First DHCP IP of the DHCP Pool

VII. Last IP of the DHCP Pool VIII. The configured private LAN IP address of the LAN Port

IX. ViewQwest DNS 1 X. ViewQwest DNS 2 XI. Enable to DHCP Service

XII. Save the DHCP config

After the DHCP pool has been setup it should be something like below:-

I. The subnet ID of the configured private LAN IP II. Total size of DHCP Pool III. Total DHCP IP has been assigned to the end device IV. Total remaining size of the DHCP Pool V. Total number of Static DHCP (IP Reservation)


10/12


9March 18, 2016

10. Change default admin password and DO NOT GIVE PASSWORD TO CUSTOMER!!!!!!!

I. User tab

II. Local Tab

III. Action > ConfigIV. Change Password

After click change password, you will be prompt this pop-up windows

Standardised ERL Password for NRES only: 295hajo5

Do not assign your personal fancy password, follow the standard!!

ONCE again, PLESE DO NOT GIVE IT TO CUSTOMER

TWICE again, PLESE DO NOT GIVE IT TO CUSTOMER

For ViewQwest Manage Device, Customer have no access rights!!


11/12


10March 18, 2016

11. Basic System Settings

I. Firmware version of ERL

II. Timezone, set to Asia > Singapore > All

III. ViewQwest DNS Server 1

IV. Add second Secondary Server

V. ViewQwest DNS Server 1

12. System Management Settings

I. Enable SSH and change the SSH port to 8445

II. Disable Telnet

III. Disable UBNT Discovery

IV. Enable SNMP

SNMP Community: view

Contact ViewQwest NOC (Optional)


12/12


11March 18, 2016

13. System Maintenance Settings

I. Save the system setting once everything has been finalizedII. Location to upgrade the ERL firmware

III. Location to retrieve the backup config of ERL

IV. Location to restore the backup config of ERL

V. Restart function

VI. Factory Reset to a blank factory configuration router

VII. A proper way to power off the ERL Completely SHUTDOWN the ERL!!

END OF THE GUIDE

Edge Router Lite Essential Configuration Guide

Documents