Quantcast
Channel: EdgeRouter topics
Viewing all articles
Browse latest Browse all 20028

No Internet for Guest Network

$
0
0

Hello,

 

I'm VERY new to networking so I apologize for any silly or obvious questions here. I have the Edge Router Lite which works fantastic for what I wanted it for. It was configured with the help of a friend. I kind of understood what he did and how it was done but I have an issue I'm really stuck at. 

 

So this is what I have configured already:

 

 

eth0 = Wireless LAN (192.168.1.x)
eth1 = Internet
eth2 = Private LAN (10.10.10.x)

 

I have a DHCP server set up for both Wireless and Private LAN which both work. Clients can connect BUT only clients on the Wireless LAN can connect to the inernet. The clients on the Private LAN can not. I'm not 100% sure on how to set up a rule to allow outbound traffic for the Private LAN. Here is my current configuration:

 

 

firewall {
all-ping enable
broadcast-ping disable
ipv6-receive-redirects disable
ipv6-src-route disable
ip-src-route disable
log-martians enable
name WAN_IN {
default-action drop
description "WAN to internal"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
}
name WAN_LOCAL {
default-action drop
description "inbound to LAb"
rule 10 {
action accept
description "Allow established/related"
state {
established enable
related enable
}
}
rule 20 {
action drop
description "Drop invalid state"
state {
invalid enable
}
}
rule 5000 {
action accept
log disable
protocol all
state {
established enable
invalid disable
new disable
related enable
}
}
rule 5001 {
action drop
description "drop invalid"
log disable
protocol all
state {
established disable
invalid enable
new disable
related disable
}
}
}
receive-redirects disable
send-redirects disable
source-validation disable
syn-cookies enable
}
interfaces {
ethernet eth0 {
address 192.168.1.1/24
description "Wireless LAN"
duplex auto
speed auto
}
ethernet eth1 {
address x.x.x.x/29
description Internet
duplex auto
firewall {
in {
name WAN_IN
}
local {
name WAN_LOCAL
}
}
speed auto
}
ethernet eth2 {
address 10.10.10.1/24
description "Private LAN"
duplex auto
firewall {
in {
name WAN_IN
}
local {
name WAN_LOCAL
}
}
speed auto
}
loopback lo {
}
}
protocols {
static {
}
}
service {
dhcp-server {
disabled false
hostfile-update disable
shared-network-name LAB_DHCP {
authoritative disable
subnet 10.10.10.0/24 {
default-router 10.10.10.1
dns-server 10.10.10.1
lease 86400
start 10.10.10.100 {
stop 10.10.10.200
}
}
}
shared-network-name LAN_DHCP {
authoritative disable
subnet 192.168.1.0/24 {
default-router 192.168.1.1
dns-server 192.168.1.1
lease 86400
start 192.168.1.100 {
stop 192.168.1.200
}
}
}
}
dns {
forwarding {
cache-size 1000
listen-on eth0
listen-on eth2
}
}
gui {
https-port 443
}
nat {
rule 5000 {
description WAN_MASQ
log disable
outbound-interface eth2
protocol all
type masquerade
}
rule 5010 {
outbound-interface eth1
type masquerade
}
}
ssh {
port 22
protocol-version v2
}
}
system {
gateway-address x.x.x.x
host-name hnr01
login {
user ubnt {
authentication {
encrypted-password ****************
}
level admin
}
}
name-server 8.8.8.8
name-server 8.8.4.4
ntp {
server 0.ubnt.pool.ntp.org {
}
server 1.ubnt.pool.ntp.org {
}
server 2.ubnt.pool.ntp.org {
}
server 3.ubnt.pool.ntp.org {
}
}
syslog {
global {
facility all {
level notice
}
facility protocols {
level debug
}
}
}
time-zone UTC
traffic-analysis {
dpi disable
export disable
}
}

Thank you in advanced for any and all help I really do appreciate it!


Viewing all articles
Browse latest Browse all 20028

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>