3-Port Router Model: ERLite-3
EdgeRouter™ Lite User Guide Table of Contents Table of Contents Chapter 1: Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Package Contents. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
EdgeRouter™ Lite User Guide Table of Contents Chapter 9: Toolbox. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Ping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 Trace. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36 Discover. . . . . . . . .
EdgeRouter™ Lite User Guide Chapter 1: Overview Chapter 1: Overview Hardware Overview Back Panel Introduction Power Ventilation Holes Thank you for purchasing the Ubiquiti Networks ™ EdgeRouter™ Lite, model ERLite-3. It is part of the EdgeMAX™ platform. For more information, visit www.ubnt.com/edgemax The EdgeRouter is a router that provides a variety of features, including routing, security, Virtual Private Networking (VPN), monitoring and management services, and Quality of Service (QoS).
EdgeRouter™ Lite User Guide Chapter 2: Installation Chapter 2: Installation Wall-Mounting To mount the EdgeRouter Lite on a wall you will need a drill, a 6 mm drill bit, and a Phillips screwdriver. Introduction 1. Use a 6 mm drill bit to drill two holes 100 mm apart. (You can use the template at the bottom of the page to mark the holes.) This chapter covers the installation instructions and a couple of typical deployment scenarios (see “Typical Deployment Scenarios” on page 3).
EdgeRouter™ Lite User Guide Chapter 2: Installation Grounding the EdgeRouter Lite (Optional) Typical Deployment Scenarios The EdgeRouter Lite is grounded through the Power Adapter; however, you can add optional ESD grounding for enhanced ESD protection. While there are numerous scenarios that are possible, this section highlights a couple of typical deployments: 1. Loosen the Grounding Screw to secure a ground wire (not included) to the Grounding Hole.
EdgeRouter™ Lite User Guide Chapter 2: Installation 4. Configure DHCP server(s) on the Services tab; see ”DHCP Server” on page 28 for more information. 2. Configure the interfaces on the Dashboard tab; see “Interfaces” on page 11 for more information. 5. Configure NAT rules on the Security > NAT tab; see ”NAT” on page 24 for more information. 3. Configure DHCP server(s) on the Services tab; see ”DHCP Server” on page 28 for more information. 6.
EdgeRouter™ Lite User Guide Chapter 3: Using EdgeOS EdgeOS is a powerful, sophisticated operating system that manages your EdgeRouter. It offers both a browser‑based interface (EdgeOS Configuration Interface) for easy configuration and a Command Line Interface (CLI) for advanced configuration. To access the EdgeOS Configuration Interface: 1. Connect an Ethernet cable from the Ethernet port of your computer to the port labeled 0 on the EdgeRouter.
EdgeRouter™ Lite User Guide Chapter 3: Using EdgeOS Depending on the tab you click, some of the screens display information and options in multiple sections. You can click the open/close tab to hide or display a section. Alerts The number of new alerts is displayed in a red popup. Open/Close Tab At the bottom of the screen, click the Alerts tab. Open/Close Tab A table displays the following information about each important event.
EdgeRouter™ Lite User Guide Basic Settings Chapter 3: Using EdgeOS Domain Name Host Name System host name Enter a name for the EdgeRouter. The host name identifies the EdgeRouter as a specific device. For example, a .com URL typically uses this format: .domain_name.com Time Zone System domain name Enter the domain name of your EdgeRouter. The domain name identifies the EdgeRouter’s network on the Internet. For example, a .com URL typically uses this format: host_name..
EdgeRouter™ Lite User Guide Telnet Server Enable Disabled by default. This option allows Telnet access to the EdgeRouter for remote configuration by command line. Telnet is not a secure form of communication, so we recommend SSH. See “Command Line Interface” on page 38 for more information. Port Specify the TCP/IP port of the Telnet server. The default is 23. System Log Every logged message contains at least a system time and host name.
EdgeRouter™ Lite User Guide Restore Config Upload config file Click Upload a file to locate the new configuration file. Select the file and click Choose. We recommend that you back up your current system configuration before uploading the new configuration. Upgrade System Image Download the firmware file from downloads.ubnt.com and save it on your computer. Chapter 3: Using EdgeOS Shut Down Router Shut Down To turn off the EdgeRouter, click this option.
EdgeRouter™ Lite User Guide Chapter 4: Dashboard Tab Chapter 4: Dashboard Tab Routes The Dashboard tab displays status information about services and interfaces. You can also configure interfaces and Virtual Local Area Networks (VLANs). Any setting marked with a blue asterisk * is required. • Connected The following route types are listed: • Static • RIP (Routing Information Protocol) Services • OSPF (Open Shortest Path First) Status information is displayed.
EdgeRouter™ Lite User Guide Chapter 4: Dashboard Tab DHCP All/Ethernet/VLAN The DHCP server status and numbers of active and inactive servers are displayed. Click DHCP to display the Services tab. Go to “DHCP Server” on page 28 for more information. Add VLAN To create a new VLAN, click Add VLAN. The Create a New VLAN screen appears. Interfaces Distribution Click Hide Distribution to hide the Interfaces > Distribution section.
EdgeRouter™ Lite User Guide A table displays the following information about each interface. Click a column heading to sort by that heading. Chapter 4: Dashboard Tab • Address Select one of the following: -- No address settings The interface uses no address settings. (In most cases, an address is needed.) -- Use DHCP The interface acquires network settings from a DHCPv4 server. Click the Renew button to acquire fresh network settings.
EdgeRouter™ Lite User Guide Chapter 5: Routing Tab The Routing tab displays status information about a variety of connected, static, RIP, and OSPF routes. You can also configure static routes and OSPF options. Any setting marked with a blue asterisk * is required. You have two sub-tabs: Routes View route information and create static routes. OSPF Configure OSPF options. IPv6 Routing IPv6 (Internet Protocol version 6) is gaining popularity and is bound to grow as IP addressing demands increase.
EdgeRouter™ Lite User Guide Routes Chapter 5: Routing Tab -- Interface Define a route using a next hop interface. A route determines how traffic travels to its destination network. If more than one route is suitable, the EdgeRouter uses administrative distance as a metric to compare all available routes, including directly connected routes, manually configured static routes, dynamic routes, and the default route. The EdgeRouter uses the route with the lowest administrative distance.
EdgeRouter™ Lite User Guide All/Static/Connected/RIP/OSPF Click the appropriate tab to filter the routes as needed. • All All routes are displayed by default. Chapter 5: Routing Tab Configure the Static Route After you click Config, the Static Route Configuration screen appears. • Static All static routes that you have configured are displayed. • Connected All routes that are directly connected to the EdgeRouter are displayed. • RIP All RIP (Routing Information Protocol) routes are displayed.
EdgeRouter™ Lite User Guide Black Hole Chapter 5: Routing Tab Redistribution A single router can use multiple routing protocols, such as OSPF and RIP, which use incompatible metrics. It must reconcile information from multiple protocols to determine which route to use for a specific destination network. You can change the metrics of the distributed protocol to create protocol compatibility. • Route type The black hole route drops unwanted traffic.
EdgeRouter™ Lite User Guide Areas To enhance scalability, an OSPF network is comprised of smaller sections called areas. At the minimum, there is the backbone area, called Area 0. Chapter 5: Routing Tab Area ID The identification number of the area is displayed. Area Type The type of area is displayed. Auth Type The authentication type of the area is displayed. Network The network address of the area is displayed.
EdgeRouter™ Lite User Guide • Network Enter the IP address and subnet mask using slash notation: / (example: 192.0.2.0/24). Chapter 5: Routing Tab Actions Click the Actions button to access the following options: • Config To configure the OSPF Interface, click Config. Go to the Configure the OSPF Interface section. Click Add New to enter more network addresses. • Delete Delete the OSPF Interface. Click Save to apply your changes.
EdgeRouter™ Lite User Guide Chapter 6: Security Tab The Security tab displays status information about firewall policies, firewall groups, (Network Address Translation) rules, and PPTP VPN options. You can also configure these policies, groups, rules, and options. Any setting marked with a blue asterisk * is required. Chapter 6: Security Tab 3. Configure the details of the firewall policy. See “Configure the Firewall Policy” on page 20 for more information.
EdgeRouter™ Lite User Guide • Default Log Check this box to log packets that trigger the default action. Click Save to apply your changes. Chapter 6: Security Tab Configure the Firewall Policy The Ruleset Configuration for _ screen appears. Search Allows you to search for specific text. Begin typing; there is no need to press enter. The results are filtered in real time as soon as you type two or more characters. All/Drop/Reject/Accept Click the appropriate tab to filter the policies by default action.
EdgeRouter™ Lite User Guide • Copy Rule To create a duplicate, click Copy Rule. The duplicate rule appears at the bottom of the list. • Delete Rule Remove the rule. Add or Configure a Rule Chapter 6: Security Tab -- Enter a protocol number Enter the port number of the protocol. Match packets of this protocol. • Match all protocols except for this Match packets of all protocols except for the selected protocol. The Rule Configuration for _ screen appears.
EdgeRouter™ Lite User Guide • P2P Match P2P (Peer-to-Peer) applications. -- None Do not match P2P connections. -- All Match all P2P connections. -- Choose P2P app(s) by name Match packets of the selected P2P application(s). Check the box of any P2P application on this list to select it. Chapter 6: Security Tab • Address Group / Network Group / Port Group Firewall groups are created on the Firewall Groups tab; see “Firewall Groups” on page 23 for more information.
EdgeRouter™ Lite User Guide Configuration Chapter 6: Security Tab Bytes The number of bytes that triggered this rule is displayed. Action The action specified by this rule is displayed. Description The keywords you entered to describe this rule are displayed. Firewall Groups Create groups organized by IP address, network address, or port number. Name The name of this policy is displayed. Description Enter keywords to describe this policy.
EdgeRouter™ Lite User Guide A table displays the following information about each group. Click a column heading to sort by that heading. Chapter 6: Security Tab -- Network Enter the IP address and subnet mask using slash notation: / (example: 192.0.2.0/24). Click Add New to enter more network addresses. Click Save to apply your changes. • Port Group Make changes as needed. Name The name of the group is displayed.
EdgeRouter™ Lite User Guide Save Rule Order To change the rule order, click and drag a rule up or down the sequence, and then release the rule. When you are finished, click Save Rule Order. Search Allows you to search for specific text. Begin typing; there is no need to press enter. The results are filtered in real time as soon as you type two or more characters. A table displays the following information about each rule. Click a column heading to sort by that heading.
EdgeRouter™ Lite User Guide • Src Address Enter the IP address or network address of the source. You can also enter a range of IP addresses; one of them will be used. Note: If you enter a network address, enter the IP address and subnet mask using slash notation: / (example: 192.0.2.0/24). • Src Port Enter the port name or number of the source. You can also enter a range of port numbers; one of them will be used. • Dest.
EdgeRouter™ Lite User Guide • Translations Complete the following: -- Address Enter the IP address that will replace the destination IP address of the incoming packet. -- Port Enter the port number that will replace the destination port number of the incoming packet. • Exclude from NAT Check the box to exclude packets that match this rule from NAT. Chapter 6: Security Tab VPN A common type of VPN uses PPTP (Point-to-Point Tunneling Protocol).
EdgeRouter™ Lite User Guide Chapter 7: Services Tab Chapter 7: Services Tab The Create DHCP Server screen appears. The Services tab displays status information about DHCP servers, DNS forwarding, and the PPPoE server. Any setting marked with a blue asterisk * is required. You have three sub-tabs: DHCP Server Configure DHCP servers to implement different subnets on the independent interfaces.
EdgeRouter™ Lite User Guide Search Allows you to search for specific text. Begin typing; there is no need to press enter. The results are filtered in real time as soon as you type two or more characters. A table displays the following information about each DHCP server. Click a column heading to sort by that heading. Chapter 7: Services Tab Configure the DHCP Server The DHCP Server - screen appears. You have three tabs available. Leases Name The name of the DHCP server is displayed.
EdgeRouter™ Lite User Guide A table displays the following information about each DHCP client. Click a column heading to sort by that heading. Chapter 7: Services Tab • Range Start The starting IP address of the range is displayed. • Range End The last IP address of the range is displayed. • Router The default route of the DHCP clients is displayed. The DHCP clients route all packets to this IP address, which is the EdgeRouter’s own IP address in most cases.
EdgeRouter™ Lite User Guide Configure Static MAC/IP Mapping The Static MAC/IP Mapping screen appears. Chapter 7: Services Tab Make changes as needed to the following options: • Range Start Enter the starting IP address of the range. • Range Stop Enter the last IP address of the range. • Router Enter the default route of the DHCP clients. The DHCP clients route all packets to this IP address, which is the EdgeRouter’s own IP address in most cases. • DNS 1 Enter the IP address of the primary DNS server.
EdgeRouter™ Lite User Guide Chapter 7: Services Tab PPPoE The EdgeRouter can function as a PPPoE (Point-to-Point Protocol over Ethernet) server so a remote PPPoE client can establish a tunnel to the EdgeRouter for network access. PPPoE Server Client IP pool range start The client IP pool is the pool of IP addresses that remote PPPoE clients will use. Enter the starting IP address of the range (this address must in a /24 subnet). Client IP pool range stop Enter the last IP address of the range.
EdgeRouter™ Lite User Guide Chapter 8: Users Tab Chapter 8: Users Tab Complete the following: The Users tab displays account information about users. You can also configure these user accounts. Any setting marked with a blue asterisk * is required. • Full Name Enter the actual name of the user. You have two sub-tabs: Local Displays configurable user accounts. Remote Displays statistics about the users who remotely access the EdgeRouter. • Username Enter a unique account name for the user.
EdgeRouter™ Lite User Guide Actions Click the Actions button to access the following options: • Config To configure the user, click Config. Go to the Configure the User section below. Chapter 8: Users Tab Remote Remote access of the EdgeRouter is logged on this tab. • Delete Delete the user account; its configuration will be removed. Configure the User After you click Config, the Username screen appears. Make changes as needed. • Username The unique account name is displayed.
EdgeRouter™ Lite User Guide Chapter 9: Toolbox Each tab of the EdgeOS interface contains network administration and monitoring tools. At the top right of the screen, click the Toolbox button. The Toolbox drop-down menu appears. Chapter 9: Toolbox Ping You can ping other devices on the network directly from the EdgeRouter. The Ping tool uses ICMP packets to check the preliminary link quality and packet latency estimation between two network devices.
EdgeRouter™ Lite User Guide Trace The Trace tool traces the hops from the EdgeRouter to a specified outgoing IP address. Use this tool to find the route taken by ICMP packets across the network to the destination host. Chapter 9: Toolbox For more information, click the arrow to view the following: • Firmware Version The version number of the device’s firmware is displayed. • Uptime The duration of the device’s activity is displayed. • Addresses The addresses of the device’s interface are displayed.
EdgeRouter™ Lite User Guide Chapter 9: Toolbox Start Click this button to start the capture. (If a Packet Limit is not specified, then this button becomes a Stop button during the capture.) Capture results are displayed with Time and Packet descriptions. Log Monitor The Log Monitor is a log displaying live updates. Click the pause button to stop the live updates. Click the play button to resume the live updates. The System log messages table displays the following information about each log.
EdgeRouter™ Lite User Guide Appendix A: Command Line Interface Appendix A: Command Line Interface Access Using a Terminal Emulator Instructions may vary slightly, depending on your specific terminal emulator. 1. Open the terminal emulator on your computer, and configure it with the following serial port settings: Overview The Command Line Interface (CLI) is available if you need to configure and monitor advanced features on the EdgeRouter or prefer configuration by command line.
EdgeRouter™ Lite User Guide Appendix A: Command Line Interface Access Using SSH Access Using Telnet SSH is enabled by default. Telnet is disabled by default. To use Telnet, enable it on the System tab (see “Telnet Server” on page 8). 1. Open the SSH client on your computer. 2. At the login prompt, enter: ssh @ The defaults are ubnt for the username and 192.168.1.1 for the hostname. You can also enter a domain name instead of an IP address for the hostname.
EdgeRouter™ Lite User Guide Appendix A: Command Line Interface Access Using the EdgeOS Configuration Interface Each tab of the EdgeOS interface contains CLI access. 1. At the top right of the screen, click the CLI button. 2. The CLI window appears. At the login prompt, enter the username (the default is ubnt). CLI Modes Operational Mode When you first log in, the CLI is in operational mode. Press the ? key to view the available commands. ubnt@ubnt:~$ Note: The question mark does not display onscreen.
EdgeRouter™ Lite User Guide Appendix A: Command Line Interface Configuration Mode To configure an interface, use the set command. To switch to configuration mode, use the configure command. ubnt@ubnt:~$ configure [edit] ubnt@ubnt# For the show, set, and delete commands, you can press the ? key for help. • set ? View the available commands. • show ? View the settings that you have configured. (Because configurations vary, the list you see will differ from the sample list displayed below.
EdgeRouter™ Lite User Guide Appendix A: Command Line Interface Remove the Default User Account Create a Firewall Rule To remove the default user account, do the following: To create a firewall rule, use the set or edit commands (both methods are described below). In addition, use the compare, discard, up, top, copy, and rename commands.
EdgeRouter™ Lite User Guide Appendix A: Command Line Interface Press the ? or tab key to display options for the specified edit level.
EdgeRouter™ Lite User Guide Appendix A: Command Line Interface To create a new firewall rule from an existing firewall rule, use the copy command. To change the name of the new firewall rule, use the rename command.
EdgeRouter™ Lite User Guide Appendix A: Command Line Interface Manage the Configuration File Typically, you use the save command to save the active configuration to disk (‘config/config.boot’); however, you can also save the active configuration to a different file or remote server. Enter save and press the ? key.
EdgeRouter™ Lite User Guide Appendix A: Command Line Interface Note: The following commands require that the configuration option, commit-revisions, be set first. After you verify that the changes should be saved, use the confirm command. show system commit diff show system commit file show system commit commit comment ubnt@RTR# confirm [edit] commit-confirm confirm rollback For details on the commit-revisions option, go to “Manage the Configuration File” on page 45.
EdgeRouter™ Lite User Guide Appendix B: Specifications Appendix B: Specifications EdgeRouter Lite Dimensions Weight Power Input Button Processor System Memory Onboard Flash Storage Certifications Wall-Mount Operating Temperature Operating Humidity 197.52 x 91 x 28 mm 289.
EdgeRouter™ Lite User Guide Appendix B: Specifications EdgeOS Interface/Encapsulation Addressing Ethernet 802.1q VLAN PPPoE GRE IP in IP Bridging Bonding (802.
EdgeRouter™ Lite User Guide Appendix C: Safety Notices Appendix C: Safety Notices 1. Read, follow, and keep these instructions. 2. Heed all warnings. 3. Only use attachments/accessories specified by the manufacturer. WARNING: Do not use this product in location that can be submerged by water. WARNING: Avoid using this product during an electrical storm. There may be a remote risk of electric shock from lightning. Electrical Safety Information 1.
EdgeRouter™ Lite User Guide Appendix D: Warranty Limited Warranty UBIQUITI NETWORKS, Inc (“UBIQUITI NETWORKS”) warrants that the product(s) furnished hereunder (the “Product(s)”) shall be free from defects in material and workmanship for a period of one (1) year from the date of shipment by UBIQUITI NETWORKS under normal use and operation.
EdgeRouter™ Lite User Guide Appendix D: Warranty Note Some countries, states and provinces do not allow exclusions of implied warranties or conditions, so the above exclusion may not apply to you. You may have other rights that vary from country to country, state to state, or province to province. Some countries, states and provinces do not allow the exclusion or limitation of liability for incidental or consequential damages, so the above limitation may not apply to you.
EdgeRouter™ Lite User Guide Appendix E: Compliance Information Appendix E: Compliance Information RoHS/WEEE Compliance Statement FCC Changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: 1. This device may not cause harmful interference, and 2.
EdgeRouter™ Lite User Guide Appendix E: Compliance Information Español La Directiva 2002/96/CE de la UE exige que los equipos que lleven este símbolo en el propio aparato y/o en su embalaje no deben eliminarse junto con otros residuos urbanos no seleccionados. El símbolo indica que el producto en cuestión debe separarse de los residuos domésticos convencionales con vistas a su eliminación.
EdgeRouter™ Lite User Guide Appendix F: Declaration of Conformity Česky [Czech] Dansk [Danish] Nederlands [Dutch] UBIQUITI NETWORKS tímto prohla uje, e tento UBIQUITI NETWORKS device, je ve shod se základními po adavky a dal ími p íslu n mi ustanoveními sm rnice 1999/5/ES. Undertegnede UBIQUITI NETWORKS erklærer herved, at følgende udstyr UBIQUITI NETWORKS device, overholder de væsentlige krav og øvrige relevante krav i direktiv 1999/5/EF.
EdgeRouter™ Lite User Guide Appendix G: Contact Information Appendix G: Contact Information Ubiquiti Networks Support Ubiquiti Support Engineers are located around the world and are dedicated to helping customers resolve software, hardware compatibility, or field issues as quickly as possible. We strive to respond to support inquiries within a 24-hour period. Online Resources Support: support.ubnt.com Wiki Page: wiki.ubnt.com Support Forum: forum.ubnt.com Downloads: downloads.ubnt.
