another great video - people should just watch, chillax and make use of the knowledge from these videos by cocktailing them to their own requirements! thanks willie.
PLEASE!! Continue your firewall rules series. The first three have helped me immensely. My interest is between interfaces. My immediate need is segmenting the two radios on a Unifi AC-Pro. The n radio for IoT and the ac radio for the secure traffic for the rest on my devices. If this makes NO SENSE please let me know.... Thanks!!! I have a EdgeRouter X and Cisco SG300.
Hey man, thanks for making the video. I found it also interesting to find out that you can also use an address group for all my 'safe' places to make a connection to my firewalls. :) Keep it up!
Yet another vote for the separate subnet video. Can the EdgeRouters create address lists from a port knock sequence to temp add an IP to a approved list for ssh etc services, I have experimented with MikroTik and can do it but curious about the EdgeRouter OS as it too seems to be IP Tables based.
Would do but don't have an EdgeRouter to hand. If I get a unit I will deffo try it and report back. Cheers from Midleton, Ireland the home of Jameson Irish Whiskey!
that would be great so you can run a guest network on the same router without alot of fuss... also would you need to do this for site to site vpns to allow traffic over the tunnel. Lock it down as allow all and put the source as the ip address of the vpn tunnel source?
Hi Willie, firewall rules between subjects vid would be great. Thank you for all your videos, they help me a lot in learning about ubnt equipment and networking generally 🙂
I just graduated from an Apple Airport to a big boy router with the EdgeRouter. I am currently running 2 networks one for my home office and another for as my family network. Another vote for segmenting traffic. One other question: I have a device (newest AppleTV) that seems to go crazy sucking down all available bandwidth at seemingly random times. Is there any way to create a rule that would limit the usage of a specific device? Thanks a bunch for the videos.
why is connectivity from lan degraded if you dont have the allow established wan/local, which duplicates wan/in rules? is it because nat makes traffic always go wan/local?
One question here: Could you explain to me the difference between direction: in and direction: local? It seems to me you could block local access to your router using the In direction and not necessarily the local direction.
Is there a way to do IPv6 hints to ISP? Like on my Cisco router I have "ipv6 dhcp client pd hint ::/60" along with other configurations so that I can have multiple natted IPv4 LANs along with multiple IPv6 LANs, subbnetted-ish.
I set up a similar rule on wan local but with a TCP port group of 22, 443 and source set to my VPS ip. if I ssh into my vps and from there try to ssh into the edgerouter it times out.
a video to segregate the traffic will be awesome also a video on how to set up a new LAN with a new subnet would be cool also. so that I can do the three dumb router's setup
Please stick to the video topic you start talking about other things in your videos that’s completely wasting of our time if you goes with more with video topic and subscribing the channel and more please don’t do it for making your videos longer some people are here to learn something not to enjoy videos and long conversations thanks
yes, i need vlan to vlan rules demo.
another great video - people should just watch, chillax and make use of the knowledge from these videos by cocktailing them to their own requirements!
thanks willie.
separating networks video please!
I know CrossTalk just did the VLAN rules thing, but it'd be great to see it from your perspective as well.
PLEASE!! Continue your firewall rules series. The first three have helped me immensely. My interest is between interfaces. My immediate need is segmenting the two radios on a Unifi AC-Pro. The n radio for IoT and the ac radio for the secure traffic for the rest on my devices. If this makes NO SENSE please let me know.... Thanks!!!
I have a EdgeRouter X and Cisco SG300.
Hey man, thanks for making the video. I found it also interesting to find out that you can also use an address group for all my 'safe' places to make a connection to my firewalls. :) Keep it up!
A two subnet lan is what I want, so a video with appropriate rules would be much appreciated.
Yet another vote for the separate subnet video.
Can the EdgeRouters create address lists from a port knock sequence to temp add an IP to a approved list for ssh etc services, I have experimented with MikroTik and can do it but curious about the EdgeRouter OS as it too seems to be IP Tables based.
Would do but don't have an EdgeRouter to hand. If I get a unit I will deffo try it and report back.
Cheers from Midleton, Ireland the home of Jameson Irish Whiskey!
that would be great so you can run a guest network on the same router without alot of fuss... also would you need to do this for site to site vpns to allow traffic over the tunnel. Lock it down as allow all and put the source as the ip address of the vpn tunnel source?
I too would love to see videos on separating the networks with the wan_local rules. Thanks!
the separate network video would be awesome! Thanks!!
could you be talking about "three dumb router" setup?
Hi Willie, firewall rules between subjects vid would be great. Thank you for all your videos, they help me a lot in learning about ubnt equipment and networking generally 🙂
I just graduated from an Apple Airport to a big boy router with the EdgeRouter. I am currently running 2 networks one for my home office and another for as my family network. Another vote for segmenting traffic.
One other question: I have a device (newest AppleTV) that seems to go crazy sucking down all available bandwidth at seemingly random times. Is there any way to create a rule that would limit the usage of a specific device?
Thanks a bunch for the videos.
I ended up with this very solution. At the time I didn't have an AP, thanks to amazon I do now.
Thanks so much. You're doing great work.
why is connectivity from lan degraded if you dont have the allow established wan/local, which duplicates wan/in rules? is it because nat makes traffic always go wan/local?
One question here:
Could you explain to me the difference between direction: in and direction: local? It seems to me you could block local access to your router using the In direction and not necessarily the local direction.
Is there a way to do IPv6 hints to ISP? Like on my Cisco router I have "ipv6 dhcp client pd hint ::/60"
along with other configurations so that I can have multiple natted IPv4 LANs along with multiple IPv6 LANs, subbnetted-ish.
I set up a similar rule on wan local but with a TCP port group of 22, 443 and source set to my VPS ip. if I ssh into my vps and from there try to ssh into the edgerouter it times out.
Is it possible to use an edge router to prevent ETH1 from accessing resources on the ETH0 network while allowing WAN access to ETH1 through ETH0?
Any update on the blocking separate networks from each other?
Willie Howe The video is not available as of 7-7-2017
Hye Willie, would appreciate a link if you've re-uploaded this video? Looking for VLAN VLAN rules.
Video starts at 5:00
You're welcome
Hello how do I access the ERX to the outside world after archiving all these configurations
a video to segregate the traffic will be awesome also a video on how to set up a new LAN with a new subnet would be cool also. so that I can do the three dumb router's setup
Yes! please add a section on isolation between VLANS / networks on one router
hola como hago para que mi balanceo de 3 lineas no me de problemas con las paginas de bancos y las de peliculas?
Is there a way to tell the EdgeRouter to use a different port for ssh?
Hi, cool videos.
Could you make one where you put the Edgerouter lite in UPNP mode showed in GUI
Is WAN_Local similar to DMZ?
vlan to vlan rules would be great. Thanks!!!
@@WillieHowe not available anymore
I would like to see the video of the local traffic segregation. I can't experiment yet. My edge router as not arrived. But it will :-) . Thanks.
Make it three Willie!
Another vote for a video on segregated networks please!
yes pls upload the video for 2 Lan separating thx
I would love to see that video to segregate the dual network
Looking for the second local video.
Good Video
Thanks
Please stick to the video topic you start talking about other things in your videos that’s completely wasting of our time if you goes with more with video topic and subscribing the channel and more please don’t do it for making your videos longer some people are here to learn something not to enjoy videos and long conversations thanks