This article will provide instructions on how to get Internet connectivity using an EdgeRouter for the first time. It will also provide details and extra steps to get the best functionality and performance possible for your environment.
There are many different environments where specific adjustments may need to be made. This article will give common setup steps, but it is not an inclusive article for all the possibilities an EdgeRouter is capable of providing.
NOTES & REQUIREMENTS:
Setup wizards were added to the User Interface starting in EdgeOS version 1.4.0. It is highly recommend to upgrade to the most current firmware before following this guide. This article is applicable to all EdgeRouter models and was written using firmware version 1.10.0.
Table of Contents
Step 1: Establish Initial Connectivity
1.1 Connect an Ethernet cable from a computer to eth0 of the EdgeRouter.
1.2 Change the IP address of your computer to an address in the 192.168.1.0/24 range, such as 192.168.1.11
If a wireless adapter is enabled and connected to a network it could conflict with the connection to the EdgeRouter. Disable the wireless adapter if necessary.
1.3 Open a Web Browser and enter 192.168.1.1 in the address bar.
1.4 Log into the router using the default username and password: ubnt/ubnt
Step 2: Run Wizard
The latest addition to the Wizard's tab is the “Basic Setup” wizard which will accomplish all the necessary tasks to allow your router to connect to the Internet, including enabling a default firewall, setting up a Local Area Network, and DHCP Server. Each item is explained in more detail below.
- DHCP: The default setting for the wizard. If your ISP distributes your IP using DHCP this option will need to be used to obtain an IP address automatically.
- Static: Some ISPs provide a static address and gateway, if your ISP has supplied this information you will enter that information here.
- PPPoE: This is another method ISPs use to deliver and authenticate your connection. If your provider assigns PPPoE information, you will enter your PPPoE account name and password here.
- It is becoming more common for ISPs to provide FTTH (Fiber to the Home) and require that the Internet be distributed using a VLAN to separate Internet from IPTV and Voice services. This checkbox will allow you to easily tag the Internet connection to a VLAN ID.
If your ISP provides a public IP, it is best practice to configure an ISP supplied modem/router into bridge mode so that the public IP is sent to the WAN interface of the EdgeRouter rather than the ISP modem/router combo device sending a private IP to the EdgeRouter. This can alleviate buffering and VPN connectivity issues.
Checking the “Enable the Default Firewall” checkbox will create two firewall rulesets on the WAN interface: one for the local direction and one for the in direction. These rulesets have a default action to drop all traffic, however the default rules accept only established and related traffic, and will drop all invalid traffic. In more simple terms, this protects the EdgeRouter itself by blocking all unexpected traffic initiated to the router and devices behind the router, but still allows traffic that is requested by the router or devices behind the router to receive requested packet flows (established and related packets).
For example, if on a remote network the connectivity to the EdgeRouter is tested by pinging the WAN address (Public IP), ICMP traffic will be blocked. If you wish to accept ICMP traffic, a new accept rule on the WAN_LOCAL ruleset can be created which is shown in the image below. This is only an example of adding a new firewall rule in the GUI after applying the wizard and is not something that is included in the wizard.
Choosing to enable IPv6 functionality in the wizard will allow the router to obtain an IPv6 address using DHCPv6 Prefix Delegation. This will configure the router to be “Dual Stack” meaning that IPv4 and IPv6 are both implemented. If your ISP supports IPv6 using DHCPv6-PD, you will need to assign the supplied Prefix length given from the ISP, enable the default IPv6 firewall, and list the LAN interfaces that will need IPv6 connectivity.
It is generally discouraged to enable bridging because traffic which is bridged is not hardware-offloaded, and will cause a decrease in performance. It is highly advised to use a dedicated switch connected to one of the LAN interfaces to allow for multiple ports of connectivity to a single LAN rather than bridging.
Some EdgeRouter models include a built in switch such as the ER-X, ER-X-SFP, ER-PoE, and EP-R6.
2.5 Local Area Network
The wizard automatically creates a LAN with the default network of 192.168.1.1/24. A DHCP server for this LAN is also created by default.
When configuring a router with a built-in switch, the LAN will be created on the switch0 interface. In this case, all ports on the switch will share the same LAN.
It is optional to configure a second LAN with a different subnet on one of the other ports.
Any private IP address range can be used for these Local Area Networks including:
2.6 Create Users
It is highly advisable for security reasons, to change the default ubnt/ubnt credentials to a username and password of your choosing. Although the default firewall rules block all external access to the router from the Internet, changing default credentials is an important security practice.
2.7 Apply Configuration
After making the necessary selections above, click Apply at the bottom of the configuration page and confirm by clicking to Reboot your EdgeRouter.
You must physically change the connected cables to your EdgeRouter. If using the default wizard settings, connect your ISP modem/router to eth0 and connect your LAN devices to the ports you configured as LAN. If enabling DHCP remained checked in the wizard, now change your Ethernet interface on your PC to obtain an address with DHCP. LAN devices will now receive an address from the DHCP pool created by the wizard and have access to the Internet.
NOTE: The wizard will automatically add functionality for NAT Masquerade and DNS forwarding although there are no adjustment settings displayed in the Wizard.