Search Results for ubnt er x 设置

EdgeRouter X 安装KMS服务

注意：以下内容仅供已购买 Microsoft Office Volume Licensing 的机构的网络管理员参考。个人用户请购买零售版或Office 365订阅。由于非法使用KMS服务带来的法律风险请自担。我看到很多地方都有人给了各种教程，安装KMS服务。但是，总违背了我的一个原则，不执行未知来源的可执行文件。而且，可能大多数人都不知道用root跑这些程序意味着什么，尤其是在路由器上。所以我找了一个python的版本，github地址在 https://github.com/SystemRage/py-kms 。由于ERX的存储空间限制，大部分操作都没法直接在路由上执行。所以接下来的笔记分两部分，第一部分在本地电脑上，第二部分在路由器上。环境路由器 Ubnt EdgeRouter X，IP 192.168.1.1，SSH端口 2345 EdgeRouter X, 固件 1.10.5 假设网络里没有配置domain，临时设置成 beijing.local Incoming search terms:EdgeRouter-Xkms200 edgeubnt er-x 设置breakfast8dpflewd54probablyeziputtingswgstomachmvdteachcenubnt kmsLink to this post!

OpenVPN Site-to-Site VPN between Asus Merlin And Ubnt EdgeRouter

前言 Network Topology RT-AC68U 使用PPPoE拨号上网，但是分配的IP是100.64.204.111, 看着像公网IP实际却是Carrier-grade NAT. 现在需要将RT-AC68U与一台在公网的EdgeRouter使用OpenVPN Site-to-Site连接起来，并在RT-AC68U端实现policy-based routing。需要让RT-AC68U下的所有设备能访问EdgeRouter LAN的网络，并根据需求透过VPS访问指定互联网。本实验参考下列文章： Set up OpenVPN Site-to-Site on UBNT EdgeRouter Lite EdgeRouter OpenVPN Connectivity Monitor EdgeRouter 策略路由实现分析 EdgeRouter Policy Based Routing Using DNSMASQ IPSET Incoming search terms:asus merlinmerlin openvpn policy basedunderkdfasus ac88 site to site openvpnopenvpn pbr iptables tagsofficesn8nosev67nervous8xdleft1i1golden2w5gettingpohdryu82Create NAT on tunnelcountryljycopyozjcontinued8x6boxz65been1nnasus openvpnasus open vpn … Continue reading “OpenVPN Site-to-Site VPN between Asus Merlin And Ubnt EdgeRouter”

EdgeRouter 策略路由实现分析

最近家里的路由规则越来越复杂，而且越来越好用。正好昨天跟朋友讨论他的家用路由改造方案，所以研究了一下EdgeRouter的策略路由（Policy-based Routing，PBR）的实现。我家里的路由是EdgeRouter Lite，固件1.9.1.1，这个实现跟固件关系不大。首先，我们可以参考一下官方的文档：EdgeRouter – Policy-based routing (source address based) Incoming search terms:bright5smedgerouter iptables forwardedgerouter max-4 cpu架构vyos mipsLink to this post!

SoftEther between VPS and UBNT EdgeRouter

This is a placeholder. And, this article won’t be public. You are not authorised to read all content in this post. Please login… Incoming search terms:haproxy reverse proxy through socks5#ip=1Link to this post!

EdgeRouter PPtP Server访问本地DNS服务

UBNT EdgeRouter 自带了PPTP Server，典型的配置方法是

set vpn pptp remote-access authentication local-users username sskaje password PASSWORD
set vpn pptp remote-access authentication mode local
set vpn pptp remote-access client-ip-pool start 192.168.100.210
set vpn pptp remote-access client-ip-pool stop 192.168.100.219
set vpn pptp remote-access dns-servers server-1 8.8.8.8
set vpn pptp remote-access mtu 1492

set vpn pptp remote-access authentication local-users username sskaje password PASSWORD

set vpn pptp remote-access authentication mode local

set vpn pptp remote-access client-ip-pool start 192.168.100.210

set vpn pptp remote-access client-ip-pool stop 192.168.100.219

set vpn pptp remote-access dns-servers server-1 8.8.8.8

set vpn pptp remote-access mtu 1492

官方参考guide: https://help.ubnt.com/hc/en-us/articles/205220840-EdgeMAX-PPTP-VPN-with-local-users-RADIUS 这个案例里，我的路由eth0是LAN口，eth0的IP是 192.168.100.1，这个配置下我的pptp客户端能正常访问到我的内网的机器。但是如果我需要把DNS设成 192.168.100.1，DNS请求就会一直没响应。路由端抓 UDP 53 的包，可以看到pptp客户端发出的dns请求，但是没有回包。看了眼/etc/dnsmasq.conf:

log-facility=/var/log/dnsmasq.log
interface=eth0
interface=eth2
cache-size=10000

log-facility=/var/log/dnsmasq.log

interface=eth0

interface=eth2

cache-size=10000

man dnsmasq -i, –interface= Listen only on the specified interface(s). Dnsmasq automatically adds the loopback (local) interface to the list of interfaces to use when the –interface option is used. If no –interface or –listen-address options are given … Continue reading “EdgeRouter PPtP Server访问本地DNS服务”