IPIP Mesh/Ubiquiti EdgeRouter with ampr-ripd - Revision history

KI5QKX: Organize IPIP Mesh documentation and navigation

2026-09-29T19:09:20Z

Organize IPIP Mesh documentation and navigation

← Older revision		Revision as of 19:09, 29 September 2026
Line 1:		Line 1:
			{{Section nav\|hub=IPIP Mesh\|title=IPIP Mesh\|category=IPIP Mesh}}

	<span style="color: blue;">'''These setup instructions are not related to any other ones mentioned for an Ubiquity EdgeRouter, describing a simple IPIP tunnel setup and do not assume you have done those steps, nor need you to do anything described there.'''</span>		<span style="color: blue;">'''These setup instructions are not related to any other ones mentioned for an Ubiquity EdgeRouter, describing a simple IPIP tunnel setup and do not assume you have done those steps, nor need you to do anything described there.'''</span>

KI5QKX: KI5QKX moved page Installing ampr-ripd on a Ubiquiti EdgeRouter or EdgeRouter X to IPIP Mesh/Ubiquiti EdgeRouter with ampr-ripd: Group IPIP Mesh documentation under IPIP Mesh

2026-09-29T19:09:19Z

KI5QKX moved page Installing ampr-ripd on a Ubiquiti EdgeRouter or EdgeRouter X to IPIP Mesh/Ubiquiti EdgeRouter with ampr-ripd: Group IPIP Mesh documentation under IPIP Mesh

← Older revision	Revision as of 19:09, 29 September 2026
(No difference)

KI5QKX: mw push

2026-09-28T22:28:17Z

mw push

← Older revision		Revision as of 22:28, 28 September 2026
Line 202:		Line 202:
	[[Category:How-To Guides]]		[[Category:How-To Guides]]
	[[Category:Routing]]		[[Category:Routing]]
			[[Category:Device and platform guides]]

KI5QKX: mw push

2026-04-30T18:52:57Z

mw push

← Older revision		Revision as of 18:52, 30 April 2026
Line 1:		Line 1:
	<span style="color: blue;">'''These setup instructions are not related to any other ones mentioned for an Ubiquity EdgeRouter, describing a simple IPIP tunnel setup and do not assume you have done those steps, nor need you to do anything described there.'''</span>		<span style="color: blue;">'''These setup instructions are not related to any other ones mentioned for an Ubiquity EdgeRouter, describing a simple IPIP tunnel setup and do not assume you have done those steps, nor need you to do anything described there.'''</span>


	== Info ==		== Info ==
Line 20:		Line 19:

	<span style="color: red;">'''NOTE: THE SETUP SCRIPT DOES NOT SECURE YOUR ROUTER. YOU NEED TO SET UP FIREWALL RULES YOURSELF.'''</span>		<span style="color: red;">'''NOTE: THE SETUP SCRIPT DOES NOT SECURE YOUR ROUTER. YOU NEED TO SET UP FIREWALL RULES YOURSELF.'''</span>


	We start assuming you have a complete working and configured router, that already has internet access (a configured WAN port and a local LAN).		We start assuming you have a complete working and configured router, that already has internet access (a configured WAN port and a local LAN).
Line 94:		Line 92:

	<br>Now the details...		<br>Now the details...


	a. First, log in and become root (don't omit that '-'):		a. First, log in and become root (don't omit that '-'):
Line 132:		Line 129:
	root@YO2LOJ-ER3:/etc# ./ampr.sh		root@YO2LOJ-ER3:/etc# ./ampr.sh
	(On router restart, this will happen automatically)		(On router restart, this will happen automatically)


	<span style="color: red;">'''NOTE: THE SETUP SCRIPT DOES NOT SECURE YOUR ROUTER. YOU NEED TO SET UP FIREWALL RULES YOURSELF.'''</span>		<span style="color: red;">'''NOTE: THE SETUP SCRIPT DOES NOT SECURE YOUR ROUTER. YOU NEED TO SET UP FIREWALL RULES YOURSELF.'''</span>
Line 203:		Line 199:
	On firmware update, there is no need to reinstall the wizard.		On firmware update, there is no need to reinstall the wizard.

			[[Category:How-To]]
	[[Category:How-To Guides]]		[[Category:How-To Guides]]
	[[Category:Routing]]		[[Category:Routing]]

KI5QKX: mw push

2026-03-01T00:14:56Z

mw push

← Older revision		Revision as of 00:14, 1 March 2026
Line 204:		Line 204:

	[[Category:How-To Guides]]		[[Category:How-To Guides]]
			[[Category:Routing]]

KI5QKX: mw push

2026-02-28T23:20:42Z

mw push

KI5QKX: mw push

2026-02-27T19:06:54Z

mw push

← Older revision		Revision as of 19:06, 27 February 2026
Line 1:		Line 1:

	<span style="color: blue;">'''These setup instructions are not related to any other ones mentioned for an Ubiquity EdgeRouter, describing a simple IPIP tunnel setup and do not assume you have done those steps, nor need you to do anything described there.'''</span>		<span style="color: blue;">'''These setup instructions are not related to any other ones mentioned for an Ubiquity EdgeRouter, describing a simple IPIP tunnel setup and do not assume you have done those steps, nor need you to do anything described there.'''</span>

KI5QKX at 20:13, 12 December 2024

2024-12-12T20:13:39Z

← Older revision		Revision as of 20:13, 12 December 2024
Line 203:		Line 203:

	On firmware update, there is no need to reinstall the wizard.		On firmware update, there is no need to reinstall the wizard.

			[[Category:How-To Guides]]

Yo2loj: /* Installing ampr-ripd */

2023-12-18T01:15:42Z

Installing ampr-ripd

← Older revision		Revision as of 01:15, 18 December 2023
Line 124:		Line 124:
	<span style="color: blue;"><i><press insert to start editing></i></span>		<span style="color: blue;"><i><press insert to start editing></i></span>
	[...]		[...]
	ampr-ripd -s -t 44 -i tun44 -m 90 <span style="color: blue;">-g pppoe0</span> -a ~~<span style="color: blue;">44.0.0.1/8,</span>~~44.128.1.0/24,44.128.2.0/24,your.gw.com <i>(adapt this list to your needs - commna separated, no spaces)</i>		ampr-ripd -s -t 44 -i tun44 -m 90 <span style="color: blue;">-g pppoe0</span> -a 44.128.1.0/24,44.128.2.0/24,your.gw.com <i>(adapt this list to your needs - commna separated, no spaces)</i>
	~		~
	~		~

Yo2loj: /* Installing ampr-ripd */ Removed rejection of 44.0.0.1 since it is now working via tunnel

2023-12-18T01:13:49Z

Installing ampr-ripd: Removed rejection of 44.0.0.1 since it is now working via tunnel

← Older revision		Revision as of 01:13, 18 December 2023
Line 119:		Line 119:

	<span style="color: blue;">If you are using pppoe, the local gateway can not be properly detected by ampr-ripd, so an additional -g parameter is needed.</span>		<span style="color: blue;">If you are using pppoe, the local gateway can not be properly detected by ampr-ripd, so an additional -g parameter is needed.</span>

	~~<span style="color: red;">44.0.0.1 is not reachable via tunnel, so it should be dropped in the command line to use the default gateway instead.~~
	Because the RIPv2 data publishes the 44.0.0.1 endpoint as a /8 subnet, the subnet must be specified a 44.0.0.1/8 in the -a command option for it to be actually rejected (if not rejected, it will be added by ampr-ripd as a /32 route due to special handling of this subnet)</span>

	root@YO2LOJ-ER3:~# cd /etc		root@YO2LOJ-ER3:~# cd /etc

← Older revision		Revision as of 23:20, 28 February 2026
Line 50:		Line 50:
	You may consider adding a similar rule for 'icmp' on WAN since this really helps debugging and ensures proper error handling (no, it will not compromise security since your gateway is detectable anyway).		You may consider adding a similar rule for 'icmp' on WAN since this really helps debugging and ensures proper error handling (no, it will not compromise security since your gateway is detectable anyway).

	== Tunnel ~~Setup~~ ==		== Tunnel setup ==
	First add tunnel interface. You need to reserve an AMPR address from your AMPR subnet for the tunnel interface.		First add tunnel interface. You need to reserve an AMPR address from your AMPR subnet for the tunnel interface.
	If you have a /32 assignment, you need to use that one, else pick an unused address.		If you have a /32 assignment, you need to use that one, else pick an unused address.
Line 75:		Line 75:
	ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 remote-ip <span style="color: red;">0.0.0.0</span>		ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 remote-ip <span style="color: red;">0.0.0.0</span>
	ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 encapsulation ipip		ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 encapsulation ipip
	ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 address <~~44net~~ router ip><span style="color: red;">/32</span>		ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 address <44Net router ip><span style="color: red;">/32</span>
	ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 description "AMPR GW"		ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 description "AMPR GW"
	ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 disable-link-detect		ubnt@YO2LOJ-ER3:~$ set interfaces tunnel tun44 disable-link-detect
Line 193:		Line 193:
	This will completely disable ubnt neighbor discovery.		This will completely disable ubnt neighbor discovery.

	== Adding a ~~Local~~ AMPR subnet ==		== Adding a local AMPR subnet ==
	To use a local AMPR subnet, just assign the router's AMPR IP with the proper subnet mask to a local network interface (eth2-3, switch0 on the ER-X, or even a VLAN), using the regular EdgeRouter management interface. Remember to also set up the proper firewall rules to allow or disallow access to your hosts (if you use the rules as described in the previous chapter, ~~44net~~ hosts will be allowed to access your whole network, while access from the internet is prohibited).		To use a local AMPR subnet, just assign the router's AMPR IP with the proper subnet mask to a local network interface (eth2-3, switch0 on the ER-X, or even a VLAN), using the regular EdgeRouter management interface. Remember to also set up the proper firewall rules to allow or disallow access to your hosts (if you use the rules as described in the previous chapter, 44Net hosts will be allowed to access your whole network, while access from the internet is prohibited).

	== Status ~~Wizard~~ ==		== Status wizard ==
	Optionally you can install a status page in the wizard section.		Optionally you can install a status page in the wizard section.