I spent alot of time going through ubnt gui for my Edge router and Unifi controller for my UAP and just wasnt having it so i decided to look for the CLI documentation which still is difficult to actually find and frustrating. I was pointed to Vyatta documentation so I went through a quick start guide here (first few google hits) http://3e851594df14a9eacdef-5cc7866f7aae0a382278b5bce7412a4a.r58.cf1.rackcdn.com/Vyatta-QuickStart_6.5R1_v01.pdf . I also found a blog post about this new 'set port-forward' leaf here http://lg.io/2015/01/11/the-ubiquiti-edgerouter-configuring-this-extremely-lowcost-enterprisegrade-router-for-home-use.html that claimed to make setting up nat and firewalls stupid easy, so i ignored trying to setup nat, although i tried that as well when things failed.
I couldnt manage to access the internet on my PC network, here is the topology and configuration:
I was able to ping from my 1.x/24 to the gateway and eth0 wan interface successfully but failed beyond that like 8.8.4.4.
Configuration:
interfaces { ethernet eth0 { address dhcp duplex auto speed auto } ethernet eth1 { address 192.168.1.254/24 duplex auto speed auto } ethernet eth2 { duplex auto speed auto } loopback lo { } } port-forward { auto-firewall enable hairpin-nat enable lan-interface eth1 wan-interface eth0 } service { dhcp-server { disabled false hostfile-update disable shared-network-name ETH1_POOL { authoritative disable subnet 192.168.1.0/24 { default-router 192.168.1.254 dns-server 192.168.1.254 lease 86400 start 192.168.1.1 { stop 192.168.1.99 } } } } gui { https-port 443 } ssh { port 22 protocol-version v2 } } system { host-name R1 login { user ubnt { authentication { encrypted-password $6$HrJPcpeJCNKP/zI$uhaHgz4OvvNrz1kCjaeaG4j0NX/qM1fP4WUquGfxbpbSEPFqRH9N09ua5iwQyPgfebR/RDMaEN.iOCj9ldHC./ plaintext-password "" } level admin } } name-server 8.8.4.4 ntp { server 0.ubnt.pool.ntp.org { } server 1.ubnt.pool.ntp.org { } server 2.ubnt.pool.ntp.org { } server 3.ubnt.pool.ntp.org { } } syslog { global { facility all { level notice } facility protocols { level debug } } } time-zone UTC } /* Warning: Do not remove the following line. */ /* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:system@4:ubnt-pptp@1:ubnt-util@1:vrrp@1:webgui@1:webproxy@1:zone-policy@1" === */ /* Release version: v1.8.0.4853089.160219.1607 */
I suspect several issues, dns forwarders(but doesnt explain pinging past wan interface, and isnt in documentation), or some nat/firewall thing(which if is the case then wth is this set port-forward stuff, and documentation setup conflicts in their method).
Another odd thing in the documentation is the 'set system default-gateway'. Without setting it seemed to give me no good results when trying to ping 8.8.4.4 from within the router, but when i did set it-which was a pain in the a to figure out but a simple 'ip route' +.1- it gave me successful pings to 8.8.4.4 so maybe it could also be final default route which im not sure how to setup. ugh.
Frustrating to think im not even halfway finished to also figuring out setting up my ap on another lan and vlan them to isolate each other.
Thank you for any help.