This was an excellent video - you saved my life! (at least my network). I really appreciate it - thanks very much. P.S. Your speaking speed was fine with me, you are very easy to follow and the pace was great. I watched the video a few times to really understand then then applied it to my Ubiquiti Router and now everything is working fine.
Thanks David! Very good lesson on EdgeRouter. I lost days, I even had a tool to reset the router every time I tried to configure and losing communication between the router and the computer. Cheers!🙏🙏🙏🙏👍
So I have one question. I have 3 new U6 lite Access Points that I want to install with this edgerouter. I want them all to work together. Is this possible with how you configured the edgerouter in the video? I just enabled the POE for Eth2,3,&4. Plugged in the U6 lite in Eth2 and I am not getting the start-up light to try and adopt and install. Any help?@@ITSolutionsNetwork
Super informative video for those of us getting started with managed routers/switches. I purchased the EdgeRouter X recently to connect a Unifi AP Pro access point to my pfSense box. The user guide is detailed but not that intuitive, especially if you just want to quickly configure a simple managed switch. Thanks to your video I was finally able to grasp the inner workings of the ER-X and get things up and running. Great job my friend!
How did you add the access point? I tried adding a U6 lite and the AC light doesn't light up (I enabled POE) and the interface software doesn't show an AC?
To keep this simple, you cannot use the ERX directly to power access points without additional power support. You need either a POE switch (best choice if you will have multiple AP's) or a POE injector.@@timothysteele7882
The wizard worked well for my simple use case, BUT this video was very educational and helped me understand many more of the configuratiron options! Thank you David.
Very informative and well-explained video. The router Wizard however, does it all BUT as you said - it doesn't allow you to understand how it works. I'm really thankful for your time and effort. Thanks from Poland :)
Oh nice! Would be cool to see a configuration for setting up gaming servers or connecting a sever as a main DNS provider. Keep up the amazing work mate
You the man! I had been struggling to get the ER-X configured properly to work with IP passthrough from my ATT BGW320. Was able to follow your steps successfully. Just wanted to confirm the firewall configuration, both firewall rulesets we configured should have the Default Action of drop, correct? Thank you.
In your Dave in the future section. Do we want all the WAN_TO_IN rulesets, ALLOW STABLISHED/ALLOW RELATED & DROP INVALID to be drop? Not accept? Then you want all the WAN_TO_LOCAL to be accept?
No. What I'm correcting there is only default action. We specifically allow ESTABLISHED/RELATED, and drop INVALID even before the traffic gets to the default action. Default action works for the traffic that is not matched by any of the rule-set before. So, basically, anything we don't Allow or Deny specifically in the rule-set, will use default action. And we want default deny for both, WAN_TO_IN, WAN_TO_LOCAL policies.
I have 1 gig Internet. But the speeds when connected through the router is only 300meg. How can I get gig through all ports? Also I am new to the Ubiquiti Router system. I'm just not understanding what you are meaning about your woopsi. Help please.
I have two IP subnets assigned to the Switch0 interface of the Edgerouter. Both subnets can communicate with one another but I want to put an end to that. What firewall settings can prevent them from talking?
Depends on the current ACL. Lets say Subnet 1 = A, Subnet 2 = B. If I were to have a Rule-set on switch0 interface already, I would just add below two statements at the top of the rule-set: Source A to Destination B - deny Source B to Destination A - deny If no rule-set in place, then you need to permit rest of the traffic as well after those two rules, for example: Source A to Destination B - deny Source B to Destination A - deny Source A or B to any destination - permit. But, having two subnets on one interfaces is not the best idea if people can change IP address and jump from one subnet to another.
So if plug a isp modem/router combo into eth0 and pc in 1 after all this guide, is that wrong? cause I did a tracert and it seems I now have a double nat? I thought the ERX was suppose to assume all router functions
Think about my firewall as an ISP. No, it's not wrong. But, if you do NAT on your modem/router, then you have a double NAT which is not the best practice and can create an issue with some traffic in the future. I use my firewall to emulate ISP. In my case, it's double NAT because I do one more NAT on the firewall to translate 12.34.56.102 into a public routable IP,; as you might already guessed, 12.34.56.102 is not my public IP, and I just use it inside my lab to make it easy understand that this is the internet side. but if I connect my ISP directly to the edge router, then I won't have a double NAT, because my ISP gives me directly the ethernet with public IP. I removed the Verizon modem that was doing the NAT, so the ethernet cable that comes from the ISP is a direct connection to the internet without any NAT in between. If you connect the ISP directly to the edge router, and the ISP modem doesn't do NAT and is in bridge mode, then you don't have a double NAT, which is typically the best scenario when the ISP has a modem converting fiber into ethernet.
So I guess until I buy my own modem its probably best that I just tell them to put this one in bridge mode is what you are saying since I'm directly connected to it, I miss the old days when we had full access to the modems from ISP's it's horrible these days. @@ITSolutionsNetwork
Hi David, Thanks for this video. Its great to see a different manual setup like this, but I have to admit as a beginner I'm having to stop the video and use chatgpt for just about every step. I've been struggling for a few hours, would you mind helping me shortcut to make sure I'm not barking up the wrong tree. I would like to have my edgerouter, with internet coming in, a server that is in eth 1 or 2, with its own ip that i can access from inside the wifi. In your setup i see you bridging eth1-4 to switch 0. In a situation like this, where I need an ip address for edgerouter and an ip address for my server, wouldnt I need it to not be in switch mode? Or maybe a better question is, if I needed 2 servers connected, how would you do that? What mode do you setup so that this can happen? In switch you cant configure ip addresses.
Think about this as a 4-port switch connected to the router interface; now you can connect to that 4-port switch whatever you want, they are all going to be in the same broadcast domain and use the same subnet, 10.0.0./24 in this case, and of course, they all have to use a unique IP address.
@@ITSolutionsNetwork Sorry for my bad english.My internet connection is voip.So i have a router with this future, i want to connect the edge router x behind my voip router, cause edge router not support voip connection, so i want to make a bridge connection between my isp router and edge router.Thanks for the super fast reply mate.
@@vectorman-jr7hw I would not recommend put edge router behind the ISP router, that will create double NAT which you want to avoid at all cost. I would stick with one router only, so if you can have two public IPs and separate them, that's the way to go.
I'm pretty sure the limit is based on the specific router and the traffic amount. As for the access, you would access such a router directly just like without PPOE or via VPN. If you worry about IP being change, you can use some kind of dynamic DNS software inside your network to get the updated IP all the time.
This was an excellent video - you saved my life! (at least my network). I really appreciate it - thanks very much. P.S. Your speaking speed was fine with me, you are very easy to follow and the pace was great. I watched the video a few times to really understand then then applied it to my Ubiquiti Router and now everything is working fine.
Thank you! And I appreciate your comment about the pace. Make sure to check the time 17:47
Thank you sir for this video. This comment is for boosting its popularity.
Thanks David! Very good lesson on EdgeRouter. I lost days, I even had a tool to reset the router every time I tried to configure and losing communication between the router and the computer. Cheers!🙏🙏🙏🙏👍
@@pafuncius thanks for watching and commenting.
Thank You so much for the video, this helped immensely with my EdgeRouter X SFP install this morning.
@@matthewlaberge thanks for watching!
Thanks for this video. I tried for 5 hours using multiple videos from others using the wizard and nothing worked! your a lifesaver!!!
Thanks for watching!
So I have one question. I have 3 new U6 lite Access Points that I want to install with this edgerouter. I want them all to work together. Is this possible with how you configured the edgerouter in the video? I just enabled the POE for Eth2,3,&4. Plugged in the U6 lite in Eth2 and I am not getting the start-up light to try and adopt and install. Any help?@@ITSolutionsNetwork
I think the problem is the edgerouter only supports 24v and the U6 needs 48v to power it.
@@timothysteele7882 You will have to buy a 48v poe injector.
Super informative video for those of us getting started with managed routers/switches. I purchased the EdgeRouter X recently to connect a Unifi AP Pro access point to my pfSense box. The user guide is detailed but not that intuitive, especially if you just want to quickly configure a simple managed switch. Thanks to your video I was finally able to grasp the inner workings of the ER-X and get things up and running. Great job my friend!
I'm glad it helped!
How did you add the access point? I tried adding a U6 lite and the AC light doesn't light up (I enabled POE) and the interface software doesn't show an AC?
To keep this simple, you cannot use the ERX directly to power access points without additional power support. You need either a POE switch (best choice if you will have multiple AP's) or a POE injector.@@timothysteele7882
Thank you Sir, This video was really helpful me to configure my EdgeRouter X
you welcome
Great guide! Looking forward to a part 2.
More to come!
The wizard worked well for my simple use case, BUT this video was very educational and helped me understand many more of the configuratiron options! Thank you David.
Thank you for your feedback, I appreciate it.
The comments like this reminds me that I have to continue making more videos.
thanks, step by step, very detail
Great Tutorial, thanks!
You're welcome!
Very informative and well-explained video. The router Wizard however, does it all BUT as you said - it doesn't allow you to understand how it works. I'm really thankful for your time and effort. Thanks from Poland :)
Hey there, my grandma was from Poland!
@@ITSolutionsNetwork Mine also ;)
Great video! can't wait to see part 2
Thanks, I’m working on second video for DUAL ISP failover option right now actually.
Oh nice! Would be cool to see a configuration for setting up gaming servers or connecting a sever as a main DNS provider. Keep up the amazing work mate
thanks.. helped a lot bro.. don't know who is complaining about your speaking, ridiculous, do you man.
Thanks, comments like this inspires me to do more videos. I appreciate it.
You the man! I had been struggling to get the ER-X configured properly to work with IP passthrough from my ATT BGW320. Was able to follow your steps successfully. Just wanted to confirm the firewall configuration, both firewall rulesets we configured should have the Default Action of drop, correct? Thank you.
That is correct, I have pointed out that at 17:47, I'll do that at 13:24 too just in case. Thanks!
@@ITSolutionsNetwork awesome thank you. I just wanted to verify. Thank you so much!
In your Dave in the future section. Do we want all the WAN_TO_IN rulesets, ALLOW STABLISHED/ALLOW RELATED & DROP INVALID to be drop? Not accept?
Then you want all the WAN_TO_LOCAL to be accept?
No. What I'm correcting there is only default action. We specifically allow ESTABLISHED/RELATED, and drop INVALID even before the traffic gets to the default action.
Default action works for the traffic that is not matched by any of the rule-set before.
So, basically, anything we don't Allow or Deny specifically in the rule-set, will use default action.
And we want default deny for both, WAN_TO_IN, WAN_TO_LOCAL policies.
I have 1 gig Internet. But the speeds when connected through the router is only 300meg. How can I get gig through all ports?
Also I am new to the Ubiquiti Router system. I'm just not understanding what you are meaning about your woopsi. Help please.
I have two IP subnets assigned to the Switch0 interface of the Edgerouter. Both subnets can communicate with one another but I want to put an end to that. What firewall settings can prevent them from talking?
Depends on the current ACL.
Lets say Subnet 1 = A, Subnet 2 = B.
If I were to have a Rule-set on switch0 interface already, I would just add below two statements at the top of the rule-set:
Source A to Destination B - deny
Source B to Destination A - deny
If no rule-set in place, then you need to permit rest of the traffic as well after those two rules, for example:
Source A to Destination B - deny
Source B to Destination A - deny
Source A or B to any destination - permit.
But, having two subnets on one interfaces is not the best idea if people can change IP address and jump from one subnet to another.
@@ITSolutionsNetwork Sounds easy enough, thanks!. I'll be using static IP assignments.
Dear David I am looking for an expert to help me setup static route and one to one NAT where can I go to find that expert please
Hi Ross, try to send an email to me: sales@itsolutionsnetwork.io with details.
So if plug a isp modem/router combo into eth0 and pc in 1 after all this guide, is that wrong? cause I did a tracert and it seems I now have a double nat? I thought the ERX was suppose to assume all router functions
Think about my firewall as an ISP.
No, it's not wrong. But, if you do NAT on your modem/router, then you have a double NAT which is not the best practice and can create an issue with some traffic in the future.
I use my firewall to emulate ISP. In my case, it's double NAT because I do one more NAT on the firewall to translate 12.34.56.102 into a public routable IP,; as you might already guessed, 12.34.56.102 is not my public IP, and I just use it inside my lab to make it easy understand that this is the internet side.
but if I connect my ISP directly to the edge router, then I won't have a double NAT, because my ISP gives me directly the ethernet with public IP. I removed the Verizon modem that was doing the NAT, so the ethernet cable that comes from the ISP is a direct connection to the internet without any NAT in between.
If you connect the ISP directly to the edge router, and the ISP modem doesn't do NAT and is in bridge mode, then you don't have a double NAT, which is typically the best scenario when the ISP has a modem converting fiber into ethernet.
So I guess until I buy my own modem its probably best that I just tell them to put this one in bridge mode is what you are saying since I'm directly connected to it, I miss the old days when we had full access to the modems from ISP's it's horrible these days. @@ITSolutionsNetwork
Can you make a video how to filter adult content with this setup
Thanks a lot for a very informative video! Would it be possible to enable DHCPv6 Prefix Delegation via the GUI as well?
I'm not aware. I never configured DHCPv6 on EdgeRouter.
@@ITSolutionsNetwork Ok. Thank you for answering!
Hi David, Thanks for this video. Its great to see a different manual setup like this, but I have to admit as a beginner I'm having to stop the video and use chatgpt for just about every step. I've been struggling for a few hours, would you mind helping me shortcut to make sure I'm not barking up the wrong tree. I would like to have my edgerouter, with internet coming in, a server that is in eth 1 or 2, with its own ip that i can access from inside the wifi. In your setup i see you bridging eth1-4 to switch 0. In a situation like this, where I need an ip address for edgerouter and an ip address for my server, wouldnt I need it to not be in switch mode? Or maybe a better question is, if I needed 2 servers connected, how would you do that? What mode do you setup so that this can happen? In switch you cant configure ip addresses.
Think about this as a 4-port switch connected to the router interface; now you can connect to that 4-port switch whatever you want, they are all going to be in the same broadcast domain and use the same subnet, 10.0.0./24 in this case, and of course, they all have to use a unique IP address.
Hi! Can i add this router to a Unify Network Consoel that i have installed on a Ubuntu VM?
is this guide apply to a bridge connection, i meant to say that i use my edgerouter as the modem that will calibrate my line behind my isp router
I do not understand the question. Can you elaborate?
@@ITSolutionsNetwork Sorry for my bad english.My internet connection is voip.So i have a router with this future, i want to connect the edge router x behind my voip router, cause edge router not support voip connection, so i want to make a bridge connection between my isp router and edge router.Thanks for the super fast reply mate.
@@vectorman-jr7hw I would not recommend put edge router behind the ISP router, that will create double NAT which you want to avoid at all cost.
I would stick with one router only, so if you can have two public IPs and separate them, that's the way to go.
@@ITSolutionsNetwork On bridge mode the double nat problem not exist :)
@@vectorman-jr7hw Sounds like you already know what you are doing. I don't see benefits of using edgerouter as a bridge.
Could you explain how I can access it remotely and also how to create a VPN so that I can connect to the same network as the Edgerouter?
It's in my to do list!
Does edge router support many ppoe like More than 50 clients and if yes how and can i access it online when i need to disconnect one client
I'm pretty sure the limit is based on the specific router and the traffic amount.
As for the access, you would access such a router directly just like without PPOE or via VPN. If you worry about IP being change, you can use some kind of dynamic DNS software inside your network to get the updated IP all the time.
@@ITSolutionsNetwork cam you do the video on how to access it and. Create some ppoe for 5 clients
i cannot aces admin interface from port0 as you in video
my friend this video very good , but i need sqm advanced for games , can you help me ?
How can I get 1Gbps for every ports of the router please ???
cannot aces admin panel on port0, factory reset, not help
i swithc to port1 and work
i have old firmware