Vraag

woensdag 16 december 2020 13:15

Acties:
  • 0 Henk 'm!
  • rickybobby
  • Registratie: December 2018
  • Laatst online: 24-03 09:17

rickybobby

Topicstarter
Hi Allemaal,

Ik heb wat hulp nodig om mijn ERX werkend te krijgen op T-Mobile netwerk.

Ik heb met behulp van de welbekende Robin's blog inmiddels wel een werkend TV maar mijn lokale netwerk (andere 3) poorten hebben geen internet.

Hieronder mijn config file. Wellicht kan iemand spotten waarom mijn Eth0 tm 3 geen internet hebben.

Ik zou ook graag DNS op 1.1.1.1 en 1.0.0.1 willen hebben maar heb geen idee of dat system name server is of DNS in services?

Alle hulp is welkom!
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304

firewall {
    all-ping enable
    broadcast-ping disable
    group {
        network-group LAN {
            description "LAN Subnet"
            network 192.168.18.0/24
            network 192.168.100.0/24
        }
    }
    ipv6-receive-redirects disable
    ipv6-src-route disable
    ip-src-route disable
    log-martians enable
    name WAN_IN {
        default-action drop
        description "WAN to internal"
        rule 10 {
            action accept
            description "Allow established/related"
            state {
                established enable
                related enable
            }
        }
        rule 20 {
            action drop
            description "Drop invalid state"
            state {
                invalid enable
            }
        }
        rule 40 {
            action accept
            description "Allow established/related"
            log enable
            protocol all
            state {
                established enable
                invalid disable
                new disable
                related enable
            }
        }
        rule 50 {
            action drop
            description "Drop invalid state"
            log enable
            protocol all
            state {
                established disable
                invalid enable
                new disable
                related disable
            }
        }
    }
    name WAN_LOCAL {
        default-action drop
        description "WAN to router"
        rule 10 {
            action accept
            description "Allow established/related"
            state {
                established enable
                related enable
            }
        }
        rule 20 {
            action drop
            description "Drop invalid state"
            state {
                invalid enable
            }
        }
        rule 30 {
            action accept
            description "Allow established/related"
            log disable
            protocol all
            state {
                established enable
                invalid disable
                new disable
                related enable
            }
        }
        rule 40 {
            action drop
            description "Drop invalid state"
            log disable
            protocol all
            state {
                established disable
                invalid enable
                new disable
                related disable
            }
        }
    }
    receive-redirects disable
    send-redirects enable
    source-validation disable
    syn-cookies enable
}
interfaces {
    ethernet eth0 {
        description "LAN - To Managed Switch"
        duplex auto
        poe {
            output off
        }
        speed auto
    }
    ethernet eth1 {
        description "LAN - Wireless Living Room"
        duplex auto
        speed auto
    }
    ethernet eth2 {
        description "LAN - Wireless First Floor"
        duplex auto
        speed auto
    }
    ethernet eth3 {
        description "IPTV - Living Room"
        duplex auto
        poe {
            output off
        }
        speed auto
    }
    ethernet eth4 {
        description "WAN - Fiber"
        duplex auto
        speed auto
    }
    loopback lo {
    }
    switch switch0 {
        description Switch
        mtu 1500
        switch-port {
            interface eth0 {
                vlan {
                    pvid 1
                }
            }
            interface eth1 {
                vlan {
                    pvid 1
                }
            }
            interface eth2 {
                vlan {
                    pvid 1
                }
            }
            interface eth3 {
                vlan {
                    pvid 640
                }
            }
            interface eth4 {
                vlan {
                    vid 640
                    vid 300
                }
            }
            vlan-aware enable
        }
        vif 1 {
            address 192.168.18.1/24
            description "Switch - VLAN - Local"
        }
        vif 300 {
            address dhcp
            description "Switch - VLAN - Internet"
            firewall {
                in {
                    name WAN_IN
                }
                local {
                    name WAN_LOCAL
                }
            }
            mtu 1500
        }
        vif 640 {
            description "Switch - VLAN - IPTV"
            mtu 1500
        }
    }
}
service {
    dhcp-server {
        disabled false
        hostfile-update disable
        shared-network-name LAN {
            authoritative enable
            subnet 192.168.18.0/24 {
                default-router 192.168.18.1
                domain-name shenkie
                lease 86400
                start 192.168.18.18 {
                    stop 192.168.18.254
                }
            }
        }
        static-arp disable
        use-dnsmasq disable
    }
    dns {
        forwarding {
            cache-size 150
            listen-on switch0
            listen-on switch0.1
            listen-on switch0.300
            listen-on switch0.640
            options localise-queries
            options expand-hosts
            options bogus-priv
            options domain-needed
        }
    }
    gui {
        http-port 80
        https-port 443
        older-ciphers disable
    }
    nat {
        rule 5010 {
            description "masquerade for WAN"
            log disable
            outbound-interface switch0.300
            protocol all
            source {
                group {
                    network-group LAN
                }
            }
            type masquerade
        }
    }
    ssh {
        port 22
        protocol-version v2
    }
}
system {
    analytics-handler {
        send-analytics-report false
    }
    crash-handler {
        send-crash-report false
    }
    host-name ubnt
    login {
        user ubnt {
            authentication {
                encrypted-password ""
            }
            level admin
        }
    }
    name-server 1.1.1.1
    name-server 1.0.0.1
    ntp {
        server 0.ubnt.pool.ntp.org {
        }
        server 1.ubnt.pool.ntp.org {
        }
        server 2.ubnt.pool.ntp.org {
        }
        server 3.ubnt.pool.ntp.org {
        }
    }
    offload {
        hwnat enable
        ipsec enable
    }
    static-host-mapping {
        host-name edgerouter {
            alias edgerouter.shenkie
            inet 192.168.18.1
        }
    }
    syslog {
        global {
            facility all {
                level notice
            }
            facility protocols {
                level debug
            }
        }
    }
    time-zone Europe/Amsterdam
}


/* Warning: Do not remove the following line. */
/* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:suspend@1:system@5:ubnt-l2tp@1:ubnt-pptp@1:ubnt-udapi-server@1:ubnt-unms@2:ubnt-util@1:vrrp@1:vyatta-netflow@1:webgui@1:webproxy@1:zone-policy@1" === */
/* Release version: v2.0.9.5346345.201028.1647 */
toon volledige bericht

[ Voor 0% gewijzigd door rens-br op 16-12-2020 13:39 . Reden: Quote tags toegevoegd ]

Alle reacties

woensdag 16 december 2020 13:46

Acties:
  • +1 Henk 'm!
  • Kasper1985
  • Registratie: Oktober 2014
  • Laatst online: 19:31

Kasper1985

Ik raad je aan de youtube filmpjes van crosstalk solutions te kijken over de edge routers.

Sowieso is het internet vlan niet relevant aan de LAN kant.

Check verder ook goed je NAT instellingen.

Heb je de wizard gebruikt voor de basis instellingen?

woensdag 16 december 2020 13:57

Acties:
  • +1 Henk 'm!

Anoniem: 1299462

Wat mij zo snel opvalt is dat je Eth4 gebruikt als uplink maar die zit ook in Switch0 en dat kan niet.
Die zou ik uit de switch0 halen en de nat rule aanpassen naar eth4.300

Zoals @Kasper1985 aangeeft zou ik de wizard gebruiken om Internet werkend te krijgen en dan IPTV toe te voegen.

[ Voor 25% gewijzigd door Anoniem: 1299462 op 16-12-2020 13:58 ]

dinsdag 26 januari 2021 13:41

Acties:
  • 0 Henk 'm!
  • rickybobby
  • Registratie: December 2018
  • Laatst online: 24-03 09:17

rickybobby

Topicstarter
Eindelijk werkend gekregen.

Er zaten een aantal zaken inderdaad niet goed zoals Firewall Rules en DNS. Deze gecorrigeerd en het werkt nu als een zonnetje.

Zie hieronder template voor Edgerouter X :

LET OP: Vul zelf de ontbrekende stukken. Deze kan je uit je huidge config overnemen.

Daarna opslaan als config file en uploaden,herstarten, klaar.

code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258

firewall {
    all-ping enable
    broadcast-ping disable
    group {
        network-group LAN {
            description "LAN Subnet"
            network 192.168.18.0/24
            network 192.168.100.0/24
        }
    }
    ipv6-receive-redirects disable
    ipv6-src-route disable
    ip-src-route disable
    log-martians enable
    name WAN_IN {
        default-action drop
        description "WAN to internal"
        rule 10 {
            action accept
            description "Allow established/related"
            state {
                established enable
                related enable
            }
        }
        rule 20 {
            action drop
            description "Drop invalid state"      
            state {        
                invalid enable
            }
        }
    }
    name WAN_LOCAL {
        default-action drop
        description "WAN to router"
        rule 10 {
            action accept
            description "Allow established/related"
            state {
                established enable
                related enable
            }
        }
        rule 20 {
            action drop 
    }
    receive-redirects disable
    send-redirects enable
    source-validation disable
    syn-cookies enable
}
interfaces {
    ethernet eth0 {
        description "LAN - To Managed Switch"
        duplex auto
        poe {
            output off
        }
        speed auto
    }
    ethernet eth1 {
        description "LAN - Wireless Living Room"
        duplex auto
        poe {
            output off
        }
        speed auto
    }
    ethernet eth2 {
        description "LAN - Wireless First Floor"
        duplex auto
        poe {
            output off
        }
        speed auto
    }
    ethernet eth3 {
        description "IPTV - Living Room"
        duplex auto
        poe {
            output off
        }
        speed auto
    }
    ethernet eth4 {
        description "WAN - Fiber"
        duplex auto
        speed auto
    }
    loopback lo {
    }
    switch switch0 {
        description Switch
        mtu 1500
        switch-port {
            interface eth0 {
                vlan {
                    pvid 1
                }
            }
            interface eth1 {
                vlan {
                    pvid 1
                }
            }
            interface eth2 {
                vlan {
                    pvid 1
                }
            }
            interface eth3 {
                vlan {
                    pvid 640
                }
            }
            interface eth4 {
                vlan {
                    vid 640
                    vid 300
                }
            }
            vlan-aware enable
        }
        vif 1 {
            address 192.168.18.1/24
            description "Switch - VLAN - Local"
        }
        vif 300 {
            address dhcp
            description "Switch - VLAN - Internet"
            firewall {
                in {
                    name WAN_IN
                }
                local {
                    name WAN_LOCAL
                }
            }
            mtu 1500
        }
        vif 640 {
            description "Switch - VLAN - IPTV"
            mtu 1500
        }
    }
}
service {
    dhcp-server {
        disabled false
        hostfile-update disable
        shared-network-name LAN {
            authoritative enable
            subnet 192.168.18.0/24 {
                default-router 192.168.18.1
                dns-server 192.168.18.1                   
                domain-name <YOUR_DOMAIN>
                lease 86400
                start 192.168.18.18 {
                    stop 192.168.18.254
                }
            }
        }
        static-arp disable
        use-dnsmasq disable
    }
    dns {
        forwarding {
            cache-size 150
            listen-on switch0
            listen-on switch0.1
            listen-on switch0.300
            listen-on switch0.640
            options localise-queries
            options expand-hosts
            options bogus-priv
            options domain-needed
        }
    }
    gui {
        http-port 80
        https-port 443
        older-ciphers disable
    }
    nat {
        rule 5010 {
            description "masquerade for WAN"
            log disable
            outbound-interface switch0.300
            protocol all
            source {
                group {
                    network-group LAN
                }
            }
            type masquerade
        }
    }
    ssh {
        port 22
        protocol-version v2
    }
}
system {
    analytics-handler {
        send-analytics-report false
    }
    crash-handler {
        send-crash-report false
    }
    host-name edgerouter
    login {
        user ubnt {
            authentication {
                encrypted-password <YOUR_PASSWORD>
            }
            level admin
        }
    }
    name-server 1.1.1.1
    name-server 1.0.0.1
    ntp {
        server 0.ubnt.pool.ntp.org {
        }
        server 1.ubnt.pool.ntp.org {
        }
        server 2.ubnt.pool.ntp.org {
        }
        server 3.ubnt.pool.ntp.org {
        }
    }
    offload {
        hwnat enable
        ipsec enable
    }
    static-host-mapping {
        host-name edgerouter {
            alias edgerouter.<YOUR_DOMAIN>
            inet 192.168.18.1
        }
    }
    syslog {
        global {
            facility all {
                level notice
            }
            facility protocols {
                level debug
            }
        }
    }
    time-zone Europe/Amsterdam
}


/* Warning: Do not remove the following line. */
/* === vyatta-config-version: "config-management@1:conntrack@1:cron@1:dhcp-relay@1:dhcp-server@4:firewall@5:ipsec@5:nat@3:qos@1:quagga@2:suspend@1:system@5:ubnt-l2tp@1:ubnt-pptp@1:ubnt-udapi-server@1:ubnt-unms@2:ubnt-util@1:vrrp@1:vyatta-netflow@1:webgui@1:webproxy@1:zone-policy@1" === */
/* Release version: v2.0.9.5346345.201028.1647 */
Reageer

Apple iPhone 16e LG OLED evo G5 Google Pixel 10 Samsung Galaxy S25 Star Wars: Outlaws Nintendo Switch 2 Apple AirPods Pro (2e generatie) Sony PlayStation 5 Pro

Tweakers is onderdeel van DPG Media B.V.
Alle rechten voorbehouden - Auteursrecht © 1998 - 2025 • Hosting door TrueFullstaq