Question 1

Are all ports gigabit ports?

Accepted Answer

There are 4 RJ45 ports on the unit.  1 is a Cisco style serial console and the other 3 are independent, routed, gigabit Ethernet ports.

Question 2

May I install this immediately after my cable modem and if so will I have three ethernet ports available?  i want to install my Airport Extreme to one port (so I can shut off wifi at night) and a switch to another port so I can have wired internet on all night (tivo, security, etc.).  Is the firewall difficult to manage?
Thanks

Accepted Answer

Hi Steve: Yup. This is a router and will need to go between your cable modem and everything else. There are only 3 ports on this router and 1 will used up for your cable modem and you'll have 2 ports left for you internal network. You can always connect a switch behind one of these two ports and add more wired connections or use your airport extreme lan ports to connect other wired devices.

Google "Smallnetbuilder Ubiquiti Edgerouter lite set up". Use the scripts on the smallnetbuilder site to set this up quickly. Make sure you set your Airport extreme to bridge mode, else you will end with a double NAT on the wireless.

I am not sure if you can turn the port off on the edgerouter but you can schedule the wireless AP on your airport extreme. You can set the times when wifi will be active. I think it's a much easier way to achieve your objective.

The firewall is not that difficult to manage but you will have to read the documentation. 
Hope this helps.

Question 3

Hi folks.

What kind of enclosure, plastic or metal? If is metal, i`ll buy one.

Accepted Answer

Metal and it works great. It has run for several months and never rebooted

Question 4

Does it support Private VLANS (PVLANS)?

Accepted Answer

All you need to do for a private vlan is setup an access-list which is part of the firewall. You tell the router which vlan can talk to the others and restrict the others. I have not done cli on this particular brand yet, but I know it offers it. You will have to set your rules up in most restrictive order. This would look something like this:

rule 10 permit LAN1 LAN2 any
rule 20 permit LAN1 WAN1 any
rule 30 deny LAN1 LAN3 any

or

rule 10 deny LAN1 LAN3 any
rule 20 permit LAN1 any any

It all depends on how granular you have to be. The syntax above is not going to be correct so you will need to research that. The best practice will be to keep the lines to a minimum. The more rules the longer the processing which slows the router. I suggest in most cases that people use a layer 3 switch to handle all inside traffic. We in the network business, call this a core. You put all LAN to LAN (vlan to vlan) routes and ACLs here. Put a default route to your router (0.0.0.0 /0 192.168.0.1). The 0.0.0.0 /0 or 0.0.0.0 0.0.0.0 part tells the routing device that if you don't have a route go to this ip. The ip 192.168.0.1 is the router LAN interface the switch is connected to. The router will need to have a route for all your LANs and vLans in order to get back. Just point them to the switch ip and you will have what you need to do efficient LAN to LAN and LAN to WAN traffic.

Question 5

Does this ship with the EdgeOS v1.4.0 that supports dual WAN load balancing?

Accepted Answer

I just got mine and it came with EdgeOS 1.2.1. The first thing I did was to download and install 1.4.1 from the Ubiquiti site.

Question 6

can this combine 2 internet sources and output as one on port 3 ?

Accepted Answer

Yes and there is a whole community forum that can help you configure it.

Question 7

Does this router accomodate /23 networks?

Accepted Answer

This thing will allow any ip addressing scheme you want. If you plan on doing router on a stick, I would be careful on how large the subnets get. A better option, if you have a big pipe to the WAN, would be to have just a /30 to a layer 3 switch and have it point to the router for your 0.0.0.0 /0 route and then add routes to the networks you created on the router for outside traffic to get back in. This will keep the router from processing overload thus maximizing traffic throughput to the internet.  Most L3 switches offer the ability to do ACL's to filter traffic between your vlans thus spreading out your tasks between two devices.

Another advantage to this is that you are not forcing all your vlan to vlan traffic to communicate at a 1 gbps speed or less. There can be 2 pairs of devices communicating at 1gbps at the same time as long as the switch can process the packets.

Question 8

Can dd-wrt be installed on this router?

Accepted Answer

Tod,

A lot of Ubiquiti products are on the Supported Hardware list, which you see when you see as the first search result in Google for rr-wrt supported devices.

ERLs are not on the list.

That said, the ERL is by no means a handicapped consumer product. The firmware is really starting to mature and you can install pretty much whatever you need. Take a look over at Ubiquiti's forum to see if it offers the features you are looking for or if others have discussed adding these features on their own.

Question 9

What is the WAN to LAN throughput?

Accepted Answer

Smallnetbuilder tested a early version. WAN-LAN was 822, LAN-WAN was 773 with a total of 1,307.

Question 10

To those who have ordered recently, are you receiving the new model (the one in the metal case with no slanted edges) or the old revision??

Accepted Answer

I ordered mine in June 2014 and received the new model as it appears on the Ubiquiti site.

Questions & Answers