Setting up a gateway on Ubiquiti EdgeRouter - Revision history

KI5QKX: mw push

2026-04-30T18:52:53Z

mw push

← Older revision		Revision as of 18:52, 30 April 2026
Line 2:		Line 2:

	'''== Updated 16/05/2020 - M0MUX =='''		'''== Updated 16/05/2020 - M0MUX =='''


	== The Definitive Document on "Setting up a gateway on Ubiquiti EdgeRouter" (Draft) ==		== The Definitive Document on "Setting up a gateway on Ubiquiti EdgeRouter" (Draft) ==
Line 152:		Line 151:
	• Select tun0 as the interface and select in as the direction.		• Select tun0 as the interface and select in as the direction.
	• Finish by pressing the Save Ruleset button.		• Finish by pressing the Save Ruleset button.


	== Example config ==		== Example config ==
Line 241:		Line 239:
	}		}

			[[Category:How-To]]

	[[Category:How-To Guides]]		[[Category:How-To Guides]]
	[[Category:Infrastructure]]		[[Category:Infrastructure]]
	[[Category:Gateways]]		[[Category:Gateways]]

KI5QKX: mw push

2026-03-01T00:14:53Z

mw push

← Older revision		Revision as of 00:14, 1 March 2026
Line 244:		Line 244:

	[[Category:How-To Guides]]		[[Category:How-To Guides]]
			[[Category:Infrastructure]]
			[[Category:Gateways]]

KI5QKX: mw push

2026-02-28T23:20:38Z

mw push

← Older revision		Revision as of 23:20, 28 February 2026
Line 17:		Line 17:
	This guide is specific to only one tunnel to the master AMPRnet gateway at UCSD. This guide doesn't cover the setup of tunnels to other gateways.		This guide is specific to only one tunnel to the master AMPRnet gateway at UCSD. This guide doesn't cover the setup of tunnels to other gateways.

	== Assumptions / ~~Prereqs~~ ==		== Assumptions / prereqs ==

	• You have already registered with AMPRNet and got your 44Net allocation at https://portal.ampr.org.		• You have already registered with AMPRNet and got your 44Net allocation at https://portal.ampr.org.
Line 45:		Line 45:
	'''You need to establish a Gateway for your 44 network, that the clients will route through.'''		'''You need to establish a Gateway for your 44 network, that the clients will route through.'''

	We are going to use the ~~44net~~ allocation of 44.131.252.64/28		We are going to use the 44Net allocation of 44.131.252.64/28

	The gateway will be the next usable IP in the block: 44.131.252.65		The gateway will be the next usable IP in the block: 44.131.252.65
Line 154:		Line 154:


	== Example ~~Config~~ ==		== Example config ==

	This is from my working ER4.		This is from my working ER4.

KI5QKX: mw push

2026-02-27T19:06:47Z

mw push

← Older revision		Revision as of 19:06, 27 February 2026
Line 1:		Line 1:

	'''== Updated 26/09/2025 - KC6GNJ =='''		'''== Updated 26/09/2025 - KC6GNJ =='''

KC6GNJ: /* Setting up the tunnel */

2025-09-28T15:17:37Z

Setting up the tunnel

← Older revision		Revision as of 15:17, 28 September 2025
Line 62:		Line 62:

	[ From here down needs serious re-work - Tim KC6GNJ]		[ From here down needs serious re-work - Tim KC6GNJ]

			Just in case you already have tunnels

	In configuration mode enter the following commands		In configuration mode enter the following commands
	<pre>		<pre>
	~~set interfaces tunnel tun44~~
	set interfaces tunnel tun44 local-ip <put the external ip assigned to you by your ISP>		set interfaces tunnel tun44 local-ip <put the external ip assigned to you by your ISP>
	set interfaces tunnel tun44 remote-ip 169.228.34.84		set interfaces tunnel tun44 remote-ip 169.228.34.84

KC6GNJ: /* Setting up the tunnel */

2025-09-26T03:23:40Z

Setting up the tunnel

← Older revision		Revision as of 03:23, 26 September 2025
Line 60:		Line 60:

	== Setting up the tunnel ==		== Setting up the tunnel ==

			[ From here down needs serious re-work - Tim KC6GNJ]

	In configuration mode enter the following commands		In configuration mode enter the following commands
Line 73:		Line 75:
	To verify your input so far, enter the following command		To verify your input so far, enter the following command
	<pre>		<pre>
	show interfaces tunnel ~~tun0~~		show interfaces tunnel tun44
	</pre>		</pre>
	The output should look like this		The output should look like this

KC6GNJ: /* Setting up the tunnel */

2025-09-26T03:13:41Z

Setting up the tunnel

← Older revision		Revision as of 03:13, 26 September 2025
Line 63:		Line 63:
	In configuration mode enter the following commands		In configuration mode enter the following commands
	<pre>		<pre>
	set interfaces tunnel ~~tun0~~		set interfaces tunnel tun44
	set interfaces tunnel ~~tun0~~ local-ip <put the external ip assigned to you by your ISP>		set interfaces tunnel tun44 local-ip <put the external ip assigned to you by your ISP>
	set interfaces tunnel ~~tun0~~ remote-ip 169.228.34.84		set interfaces tunnel tun44 remote-ip 169.228.34.84
	set interfaces tunnel ~~tun0~~ encapsulation ipip		set interfaces tunnel tun44 encapsulation ipip
	set interfaces tunnel ~~tun0~~ description "Tunnel to AMPRNet gateway"		set interfaces tunnel tun44 description "Tunnel to AMPRNet gateway"
	~~</pre>~~		# Now commit the changes
	Now commit the changes
	~~<pre>~~
	commit ; save		commit ; save
	</pre>		</pre>
Line 84:		Line 82:
	remote-ip 169.228.34.84		remote-ip 169.228.34.84
	</pre>		</pre>

	== Setting up source address routing policy ==		== Setting up source address routing policy ==

KC6GNJ at 03:10, 26 September 2025

2025-09-26T03:10:59Z

← Older revision		Revision as of 03:10, 26 September 2025
Line 46:		Line 46:
	'''You need to establish a Gateway for your 44 network, that the clients will route through.'''		'''You need to establish a Gateway for your 44 network, that the clients will route through.'''

	~~As I write this, my~~ 44net allocation is 44.131.252.64/28		We are going to use the 44net allocation of 44.131.252.64/28

	~~My Gateway~~ will be the next IP in the block. 44.131.252.65		The gateway will be the next usable IP in the block: 44.131.252.65

	Enter configuration mode		Enter configuration mode
	<pre>		<pre>
	configure		configure
	~~</pre>~~		# Set the AMPRNet network assignment you have received to eth2 (Gateway we just decided on)
	Set the AMPRNet network assignment you have received to eth2 (Gateway we just decided on)
	~~<pre>~~
	set interfaces ethernet eth2 address 44.131.252.65/28		set interfaces ethernet eth2 address 44.131.252.65/28
	~~</pre>~~		# Now commit the changes
	Now commit the changes
	~~<pre>~~
	commit		commit
	</pre>		</pre>

KC6GNJ: /* Warning!! */

2025-09-26T03:07:30Z

Warning!!

← Older revision		Revision as of 03:07, 26 September 2025
Line 36:		Line 36:
	== Warning!! ==		== Warning!! ==

	The ~~author does~~ not assume responsibility if you bork/brick/wedge your router. Please ensure that you back up your EdgeRouter configuration before making any changes. Also, ~~make sure~~ you know how to restore your configuration and ~~you know~~ how to ~~restore~~ your router to factory defaults if everything else fails.		The authors do not assume responsibility if you bork/brick/wedge your router. Please ensure that you back up your EdgeRouter configuration before making any changes. Also, ensure you know how to restore your configuration and how to reset your router to factory defaults if everything else fails.

	== Initial setup ==		== Initial setup ==

KC6GNJ at 03:05, 26 September 2025

2025-09-26T03:05:38Z

← Older revision		Revision as of 03:05, 26 September 2025
Line 13:		Line 13:
	EdgeRouter is appealing to anyone interested in setting up a gateway to AMPRNet due to the built-in support for the IPIP tunneling protocol.		EdgeRouter is appealing to anyone interested in setting up a gateway to AMPRNet due to the built-in support for the IPIP tunneling protocol.
	This guide was created based on the experiences of various individuals setting up a gateway to AMPRNet using the EdgeRouter PoE5 and ER-6P models.		This guide was created based on the experiences of various individuals setting up a gateway to AMPRNet using the EdgeRouter PoE5 and ER-6P models.
	Other models should work since they all use the same OS; it should work with minimal adjustment, if any. The main differences between models is		Other models should work since they all use the same OS; it should work with minimal adjustment, if any. The main differences between models are
	that some have a switch interface that can be hardware offloaded for better performance. If you don't have a model that supports the switch interface, you can use the Linux kernel-based "bridge" interface.		that some have a switch interface that can be hardware offloaded for better performance. If you don't have a model that supports the switch interface, you can use the Linux kernel-based "bridge" interface.

	This guide is ~~specfic for~~ only one tunnel to the master AMPRnet gateway at UCSD. This guide doesn't cover the setup of tunnels to other gateways.		This guide is specific to only one tunnel to the master AMPRnet gateway at UCSD. This guide doesn't cover the setup of tunnels to other gateways.

	== Assumptions / Prereqs ==		== Assumptions / Prereqs ==

	• You have already registered with AMPRNet and got your ~~Net44~~ allocation. It should be ~~showing~~ in the encap.txt file before you go further		• You have already registered with AMPRNet and got your 44Net allocation at https://portal.ampr.org.
			• You should be seeing your allocation in the encap.txt file before you go further. It can be reviewed at http://44.0.0.1//encap.txt
	• You have registered some hosts in the AMPRNet DNS like <your call sign>.ampr.org		• You have registered some hosts in the AMPRNet DNS like <your call sign>.ampr.org
	• Your EdgeRouter is upgraded to the latest EdgeOS (currently version v2.0.6)		• Your EdgeRouter is upgraded to the latest EdgeOS (currently version v3.0.0), although these instructions should work with 2.0.9
			• You have backed up the current version of your router. Just in case (see below).
	• You have a standard working NAT setup		• You have a standard working NAT setup
	• Interface eth0 is your connection to your ISP		• Interface eth0 is your connection to your ISP (WAN)
	• Interface eth1 is your home LAN where your computers are connected		• Interface eth1 is your home LAN, where your computers are connected behind NAT
			• Interface eth2 will be the port that will provide your 44Net allocation

	~~You have successfully setup the EdgeRouter and it is connected to the internet and providing service to your home computers~~		== The objective ==

	~~== The plan ==~~		Interface eth2 will be used as our AMPRNet LAN, where computers and other devices with assigned AMPRNet addresses will connect via an IPIP tunnel to the UCSD AMPRNet gateway via your current Internet provider.

	We will ~~use eth2~~ as our AMPRNet LAN where computers and other devices with assigned AMPRNet ~~address~~ will connect via an IPIP tunnel to the UCSD AMPRNet gateway ~~and the internet~~.

	== Warning!! ==		== Warning!! ==

	The author does not assume responsibility if you ~~mess up~~/brick your router. Please ~~make sure to~~ back up your EdgeRouter configuration ~~prior to~~ any ~~change~~.		The author does not assume responsibility if you bork/brick/wedge your router. Please ensure that you back up your EdgeRouter configuration before making any changes. Also, make sure you know how to restore your configuration and you know how to restore your router to factory defaults if everything else fails.
	Also make sure you know how to restore your configuration and you know how to restore your router to factory defaults if everything else fails.

	== Initial setup ==		== Initial setup ==

	Open the CLI using the GUI button or connect using an ssh client such as PuTTY to 192.~~196~~.2.1.		Open the CLI using the GUI button or connect using an ssh client such as ssh itself (Unix/Linux/Mac/newer releases of Windows) or PuTTY (Windows) to the LAN IP address of the router. For fresh factory reset routers, plug your laptop into eth0 and set up your computer to have an IP address of 192.168.1.x address. You would ssh into 192.168.1.1 with the user of 'ubnt' and the password of 'ubnt'. If you have an existing LAN with a DHCP server, plug the LAN into port eth1 on the Edgerouter. It will pick up an IP address in your LAN's prefix. You will need to track down the IP address it got via your current router.

	~~The default username/password~~ is ~~ubnt/ubnt unless~~ you ~~have already changed it.~~		Most Edgerouters come with a "console" serial port. You can pick up a cisco-compatible USB to RJ-45 serial port from Amazon or other locations for about $10. It is highly recommended you use the console port as if you local yourself out of the network side of the Edgerouter, you can fix your "mistake" on the console port;

	'''You need to establish a Gateway for your 44 network, that the clients will route through.'''		'''You need to establish a Gateway for your 44 network, that the clients will route through.'''