Ubiquiti ERLite-3 User manual

3-Port Router


i
Table of ContentsEdgeRouter™LiteUser Guide
Ubiquiti Networks, Inc.
Table of Contents
Chapter 1: Overview................................................1
Introduction. . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . .. . . . . . . . . . .. . . . . . . . .1
PackageContents................................................................1
ConfigurationInterface System Requirements. . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . . . . . .1
HardwareOverview..............................................................1
Chapter 2: Installation . .. .. . .. . .. . .. . . . . .. .. . .. . .. . .. . .. . .. .. . .. . .. .2
Introduction. . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . .2
InstallationoftheEdgeRouterLite................................................2
TypicalDeploymentScenarios....................................................3
Chapter 3: Using EdgeOS .. . .. .. . .. . .. . . . . .. . .. .. . .. . .. . .. . .. . .. .. . .5
Ports and StatusInformation. . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . .5
Navigation.......................................................................5
CommonInterfaceOptions.......................................................6
Chapter 4: Dashboard Tab . .. .. . .. . .. . .. . .. . .. .. . .. . .. . .. . . . . .. .. . .10
Services.........................................................................10
Interfaces.......................................................................11
Chapter 5: Routing Tab . .. . .. . .. .. . .. . . . . .. . .. . .. .. . .. . .. . .. . .. . .. . 13
IPv6Routing....................................................................13
Routes..........................................................................14
OSPF............................................................................16
Chapter 6: Security Tab . . .. . .. . .. .. . .. . .. . .. . .. .. . .. . . . . .. . .. . .. .. . 19
FirewallPolicies.................................................................19
FirewallGroups..................................................................23
NAT.............................................................................24
VPN.............................................................................27
Chapter 7: ServicesTab . .. .. . .. . .. . .. . . . . .. .. . .. . .. . .. . .. . .. .. . .. . 28
DHCPServer ....................................................................28
DNS.............................................................................31
PPPoE...........................................................................32
Chapter 8: Users Tab . .. .. . .. . .. . .. . . . . .. .. . .. . .. . .. . .. . .. .. . .. . .. . 33
Local............................................................................33
Remote.........................................................................34

ii
Table of ContentsEdgeRouter™LiteUser Guide
Ubiquiti Networks, Inc.
Chapter 9: Toolbox................................................35
Ping.............................................................................35
Trace............................................................................36
Discover. . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . . . . . .. . . . . . . . . . . . . . . . . . . . . . . .. . . . . . . . . . . .36
PacketCapture..................................................................36
LogMonitor.....................................................................37
AppendixA: Command LineInterface . .. . . . .. . .. . .. . .. . .. .. . .. . .. . 38
Overview........................................................................38
AccesstheCLI...................................................................38
CLIModes.......................................................................40
AppendixB: Specifications . .. .. . .. . .. . .. . .. . .. .. . .. . .. . .. . .. . .. .. .47
AppendixC: Safety Notices. . .. . .. . .. .. . .. . . . . .. . .. . .. .. . .. . .. . .. . . 49
ElectricalSafetyInformation.....................................................49
AppendixD: Warranty.............................................50
GeneralWarranty................................................................50
AppendixE: Compliance Information. . .. . . . . .. . .. .. . .. . .. . .. . .. . .. 51
FCC.............................................................................51
IndustryCanada.................................................................51
AustraliaandNewZealand......................................................51
JapanVCCI-A....................................................................51
CEMarking......................................................................51
RoHS/WEEEComplianceStatement..............................................51
AppendixF:Declaration ofConformity . .. .. . .. . .. . .. . . . . .. .. . .. . ..53
AppendixG: Contact Information.. . .. . .. . .. . . . .. . .. . .. . .. . .. .. . .. . 54
UbiquitiNetworksSupport......................................................54

1
Chapter 1: OverviewEdgeRouter™LiteUser Guide
Ubiquiti Networks, Inc.
Hardware Overview
Back Panel
 

Power
GroundingHolewith
GroundingScrew
VentilationHoles
Front Panel Ports
   

Console ResetEthernet (0-2)
Interface Description
Console
RJ45serialconsole portfor CommandLineInterface
(CLI) management. Usea RJ45-to-DB9,serial console
cable,also knownas arollovercable, to connect the
Console porttoyourcomputer.(Ifyour computer
doesnot havea DB9port, thenyouwillalsoneeda
DB9adapter.)
Ethernet (0-2) 10/100/1000 MbpsEthernet ports.
Reset
To reset tofactory defaults, disconnect the Power
Adapter fromthePower port. Press and holdthe
Reset button while connectingthe Power Adapter
tothe Powerport. Keepholdingthebutton untilthe
right LEDon port 2 startsflashingandthen stops
aftera fewseconds.
Front Panel LEDs
The LEDs on theleftsideof eachport are not used atthis
time. Below is a description of the right LED functionality:
   

Power Speed/Link/Act
10/100 Mbps
Speed/Link/Act
1000Mbps
LED State Status
Console
Power Off EdgeRouterLitenot powered on.
Green EdgeRouterLiteis poweredon.
Ethernet (0-2)
Speed/
Link/Act
Off No Link
Amber Link Establishedat 10/100 Mbps
Amber Flashing Link Activity at10/100 Mbps
Green Link Establishedat 1000 Mbps
Green Flashing Link Activity at 1000Mbps
Chapter 1: Overview
Introduction
Thank you forpurchasing theUbiquitiNetworks™
EdgeRouter™Lite, model ERLite-3. It is part ofthe
EdgeMAX™platform. For more information, visit
www.ubnt.com/edgemax
The EdgeRouteris a router that provides a variety of
features, including routing, security,VirtualPrivate
Networking (VPN), monitoringandmanagement
services, and Quality of Service (QoS). For moredetailed
specifications, referto “EdgeOS” on page48.
This User Guideis designedto provide instructions about
installationof theEdgeRouterandto provide details about
howtousethe EdgeOS™Configuration Interface.
Configuration
The intuitive interface allows you to convenientlymanage
yourEdgeRouter using yourwebbrowser. (See “Using
EdgeOS” on page 5 for more information.) If youneed
toconfigureadvanced features orprefer configuration by
command line, you can use the Command Line Interface
(CLI). (See“Command Line Interface” on page 38 for
moreinformation.)
Package Contents
EdgeRouter Lite
EdgeRouter Lite Power Adapter
(12V, 1A) Power Cord
3-PortRouter
Model: E RLi te- 3
M2.9x20Screws
(Qty. 2) M2.9 Anchors (Qty. 2) QuickStart Guide
Configuration Interface System
Requirements
• Microsoft WindowsXP, Windows Vista, Windows 7,
Windows 8, Linux, or Mac OS X
• Web Browser: GoogleChrome, MozillaFirefox, or
Microsoft InternetExplorer 8(or above)

2
Chapter 2: InstallationEdgeRouter™LiteUser Guide
Ubiquiti Networks, Inc.
Chapter 2: Installation
Introduction
This chapter coversthe installationinstructionsanda
couple of typicaldeployment scenarios (see “Typical
Deployment Scenarios” on page 3). After you
install theEdgeRouter, refer to the instructions in “Using
EdgeOS” on page 5, which explain howtoaccess the
ConfigurationInterface.
Installation of the EdgeRouter Lite
Mount theEdgeRouter ona wall, or placeit on a
Note: Keep 20 mm of clearance next to the
ventilationholesforadequate airflow.
Cabling Requirements
• For indoor applications, use Category 5 (or above)
cabling approvedfor indoor use.
• For outdoor applications, shielded Category 5 (or
above) cabling should be used forallwired Ethernet
connections andshouldbe grounded through the
ACground of the power supply.We recommendthat
youprotect youroutdoor networksfrom themost
brutal environmentsand devastatingESD attacks with
industrial-grade shielded Ethernet cable fromUbiquiti
Networks™. For more details, visit:
www.ubnt.com/toughcable
Note: Althoughthe cabling canbe located
outdoors, the EdgeRouter Liteitself should be
housed inside a protective enclosure.
Terms of Use
All Ethernet cabling runs must use CAT5(or above).It
is the customer’s responsibility tofollow local country
regulations, including operation withinlegal frequency
channels, output power, indoor cabling requirements, and
Dynamic Frequency Selection(DFS)requirements.
Wall-Mounting
To mount the EdgeRouter Lite on awall you willneed a
drill, a 6 mm drillbit, and a Phillipsscrewdriver.
1. Use a 6mm drill bit todrill twoholes 100 mmapart.
(You canusethetemplateatthe bottomof the page to
mark the holes.)
2. Insert theM2.9Anchors into theholes. Use a Phillips
screwdriver tosecurea M2.9x20Screw toeachanchor.
Leavea clearance of approximately 3mm between
eachscrew head and its anchor.
3mm
Note: Youcan alsomount theEdgeRouter Litein a
verticalorientation.
3. Position theEdgeRouter Litewith theEthernet
ports facing down. Place the Wall-MountSlots of the
EdgeRouter Lite over the screw heads on thewall.Then
slidethe EdgeRouter Lite down tolock itinto place.
Mounting Template
Therecommended mounting orientation is horizontal withthe ports facing down.
Note:TheEdgeRouterLitecan alsobe mounted ina vertical orientation.Turnthis page sidewaysto mark theholes for
verticalplacement.
100mm

3
Chapter 2: InstallationEdgeRouter™LiteUser Guide
Ubiquiti Networks, Inc.
Grounding the EdgeRouter Lite (Optional)
TheEdgeRouterLiteisgrounded through thePower
Adapter; however, youcan add optional ESD grounding for
enhanced ESD protection.
1. Loosen theGrounding Screw tosecure a ground wire
(not included) tothe Grounding Hole.
2. Secure theotherend of the ground wire toa
grounding block.
Connecting Power
1. Connect thePowerAdapter tothePower port.
2. Connect thePowerCord tothePowerAdapter. Connect
theother endof the PowerCord
Typical Deployment Scenarios
While there arenumerousscenariosthatarepossible, this
section highlights a coupleof typicaldeployments:
• Service ProviderDeployment
• CorporateDeployment
Service Provider Deployment
This scenario uses sixEdgeRouter devices:
1. OSPFArea 0 to OSPF Area 1
2. OSPFArea 0 to OSPF Area 2
3. OSPFArea 1
4. OSPFArea 1 to Internet
5. OSPFArea 2
6. OSPFArea 2 to Internet
Site-to-Site
Link
OSPF
Area0
OSPF
Area1
OSPF
Area2
Internet
Internet
SiteA
SiteB
Herearethetypical steps tofollow:
1. Configure theappropriatesettingson theSystem tab
(see “System” on page6 for more information):
• HostName
• TimeZone
• Gateway
• NameServer
• DomainName
• NTP
2. Configure theinterfaces onthe Dashboard tab; see
“Interfaces” on page11 for more information.
3. Configure OSPFsettingsonthe Routing > OSPFtab; see
“OSPF” on page 16 for moreinformation.

4
Chapter 2: InstallationEdgeRouter™LiteUser Guide
Ubiquiti Networks, Inc.
4. Configure DHCPserver(s)on theServices tab; see
”DHCP Server” on page 28 for more information.
5. Configure NATrulesonthe Security >NAT tab; see
”NAT” on page24 for more information.
6. Configure firewall rules on the Security> Firewall
Policies tab; see ”FirewallPolicies” on page 19 for
moreinformation.
7. Configure additional settings as neededfor your
network.
Corporate Deployment
This scenario uses a single EdgeRouter device. The three
independent interfaces connectto thefollowing:
• Internet
• DMZ
• LAN
Internet
DMZ
LAN
FirewallPolicies
Herearethetypical steps tofollow:
1. Configure theappropriatesettingson theSystem tab
(see “System” on page6 for more information):
• HostName
• TimeZone
• Gateway
• NameServer
• DomainName
• NTP
2. Configure theinterfaces onthe Dashboard tab; see
“Interfaces” on page11 for more information.
3. Configure DHCPserver(s)on theServices tab; see
”DHCP Server” on page 28 for more information.
4. Configure NATrulesonthe Security >NAT tab; see
”NAT” on page24 for more information.
5. Configure firewall rules on the Security> Firewall
Policies tab; see ”FirewallPolicies” on page 19 for
moreinformation.
6. Configure additional settings as neededfor your
network.

5
Chapter 3: Using EdgeOSEdgeRouter™LiteUser Guide
Ubiquiti Networks, Inc.
Chapter 3: Using EdgeOS
EdgeOS is a powerful, sophisticatedoperatingsystemthat
manages your EdgeRouter. It offers both a browser-based
interface (EdgeOSConfigurationInterface) foreasy
configuration and a Command Line Interface (CLI)for
advanced configuration.
To accesstheEdgeOSConfiguration Interface:
1. Connect anEthernetcablefrom theEthernetport
of your computer to theportlabeled 0on the
EdgeRouter.
2. Configure the Ethernetadapter onyour computer
witha static IPaddresson the192.168.1.x subnet (e.g.,
192.168.1.100).
Note: As an alternative, youcan connect a serial
cable totheConsole port of the EdgeRouter. See
“Command Line Interface” on page 38 for
moreinformation.
3. Launch your web browser. Type https://192.168.1.1 in
theaddress field. Press enter (PC)or return (Mac).
4. The login screen willappear. Enter ubnt inthe
Username and Password fields. Read theUbiquiti
License Agreement, and check the box next to Iagree
tothetermsofthisLicenseAgreement toacceptit. Click
Login.
The EdgeOS ConfigurationInterface will appear, allowing
youto customizeyour settingsas needed.
Note: To enhance security, we recommendthatyou
changethedefaultlogin using at leastone of the
followingoptions:
• Set up a newuser account on the Users>Local tab
(preferred option). Fordetails, goto “AddUser”
on page 33.
• Changethe default password of the ubntlogin on
theUsers> Local tab. For details, goto “Configure
the User” onpage34.
Ports and Status Information
ThePorts imagedisplays the activeconnections. An amber
port indicates 10/100 Mbps, and a greenport indicates
1000 Mbps. TheStatus bar graphs display thefollowing:
CPU Thepercentageof processingpowerthat the
EdgeRouteris using isdisplayed.
RAM The percentage of RAM that the EdgeRouter is using
isdisplayed.
Uptime The duration of theEdgeRouter’s activity is
displayed.
Place your mouse over aportto viewthe following:
Enabled/Disabled Theadministrativestatus is displayed.
Link The connection status isdisplayed.
Speed Thespeed (in Mbps) and duplex modeare
displayed.
Navigation
The EdgeOS softwareconsists of five primary tabs, and
some ofthesetabshave sub-tabs. ThisUser Guidecovers
eachtab witha chapter. For details on a specific tab, refer
totheappropriatechapter.
• Dashboard The“Dashboard Tab” onpage 10
displays status information about services and
interfaces. You can also configure interfacesandVirtual
LocalAreaNetworks(VLANs).
• Routing The“Routing Tab” on page 13 configures
staticroutesand Open Shortest Path First(OSPF)
settings, includingmetrics, areas, and interfaces.
• Security The“Security Tab” on page 19 configures
firewall policies, firewall groups, NetworkAddress
Translation (NAT) rules, and PPTP VPNoptions.
• Services The“Services Tab” on page 28 configures
DHCP servers, DNSforwarding, and the PPPoE server.
• Users The“Users Tab” on page 33 configures user
accounts withadministratoror operatoraccess.

6
Chapter 3: Using EdgeOSEdgeRouter™LiteUser Guide
Ubiquiti Networks, Inc.
Dependingon thetabyou click, some of thescreens
display information and optionsin multiple sections. You
can click theopen/close tab to hide ordisplaya section.
Open/CloseTab
Open/CloseTab
Common Interface Options
Thecommon interface optionsare accessiblefrom all tabs
onthe EdgeOS interface:
• Welcome
• CLI
• Toolbox
• Alerts
• System
Required fields aremarked bya blue asterisk *. Whenthe
information icon isdisplayed, you canclickthe icon for
moreinformationaboutanoption.
Welcome
At the top left of thescreen, click Welcome toview the
Logout option:
Logout To manually log out of the EdgeRouter
ConfigurationInterface, click this option.
CLI
Advanced userscan make configurationchanges using
Linux commands. At thetop right of the screen,click the
CLI button. See “Command Line Interface” on page
38 for moreinformation.
Toolbox
At the top right ofthe screen, click theToolbox
button. The followingnetworkadministrationand
monitoringtools areavailable:
• “Ping” on page 35
• “Trace” on page 36
• “Discover” on page36
• “Packet Capture” on page 36
• “Log Monitor” on page37
Alerts
The numberof new alerts is displayedin a redpopup.
At thebottom of thescreen, click theAlerts tab.
A table displays the followinginformation about each
important event.
Message A description of theevent is displayed.
Field The settings that are affected by theeventare
displayed.
Actions Thefollowing optionsareavailable:
• Remove Clickthisbutton toclear an alert.
• Clear All Click this button toclear all alerts.
Click the top right corner of theAlerts tab to close it.
System
At thebottom of thescreen, click theSystem tab toaccess
thedevice settings.
Thedevicesettingsare organized intothese sections:
• “Basic Settings” on page 7
• “Management Settings” on page7
• “Configuration Management & Device Maintenance”
on page 8
• “Restart &Shut Down Router” on page 9

7
Chapter 3: Using EdgeOSEdgeRouter™LiteUser Guide
Ubiquiti Networks, Inc.
Basic Settings
HostName
System host name Enter a name forthe EdgeRouter. The
host name identifies the EdgeRouter asa specificdevice.
For example, a .com URL typically uses this format:
<host_name>.domain_name.com
Time Zone
UseCoordinated Universal Time (UTC) UTCis the
international time standard used by NetworkTime
Protocol (NTP) servers. If your routers arelocated in
multiple timezones, then you may wantto use UTC.
Timezone To set yournetworkto a specific timezone,
select Timezone and configure thefollowing:
• Selectcontinent/ocean Select yourlocation.
• Selectcountry/region Select yourlocation.
• Selecttime zone Select yourtimezone.
Gateway
System gateway address Enter the IP address of your
gateway. This willset up your default route. If you want to
set up additional default routes, configure them as static
routesontheRouting tab. See “Routing Tab” on page
13 for moreinformation.
Name Server
Domain NameSystem (DNS) translates domainnamesto
IP addresses; each DNS server on the Internetholds these
mappingsin itsrespectiveDNSdatabase.
System name server Enter the IP address of yourDNS
server (example: 192.0.2.1 for IPv4 or2001:db8::1 for IPv6).
Click Add New toaddadditional servers.
Domain Name
System domain name Enter thedomain name of your
EdgeRouter. The domain nameidentifies theEdgeRouter’s
network on the Internet. For example, a .com URL typically
uses this format:
host_name.<domain_name>.com
NTP
NTP is a protocol for synchronizing the clocks ofcomputer
systems overpacket-switched, variable-latency data
networks. Youcan use itto set thesystemtimeon the
EdgeRouter. If theSystemLog optionis enabled, then
thesystemtimeis reported nextto every log entry that
registers a systemevent.
Automatically update system time using NTP By
default, theEdgeRouterobtains the systemtime froma
timeserver ontheInternet.
Click Savetoapply your changes.
ManagementSettings
SSH Server
Enable Enabled by default.This option allows SSH
(Secure Shell) access tothe EdgeRouter for remote
configuration bycommand line. SSHuses encryption and
authentication, so it is a secure form of communication.
See “Command Line Interface” on page 38 for more
information.
Port Specify the TCP/IP portof theSSHserver. The default
is22.