Category Archives: EdgeRouter

EdgeRouter: Force add the default routes to the load balanced WAN interfaces

By | August 26, 2016

An EdgeRouter firmware update from 1.8.5 to 1.9 broke my L2TP based VPN. After the update my l2tp connection to local subnets was no longer working. Note that I have a load balancing setup with eth0 and eth1 being the load balanced WAN interfaces. It seems that due to the changes done for the l2tp… Read More »

Data Center: Add EdgeRouter logs to Security Onion

By | November 10, 2016

After seting up Security Onion as my home data center IDS (see https://blog.voina.org/data-center-ids-solution-using-security-onion/) I started to integrate monitoring of other resources to it. The first idea was to add the monitoring of my EdgeMax routers. Security Onion has a syslog-ng service that is able to receive client syslog data. Then we can visualize this data… Read More »

EdgeRouter: Routing through OpenVPN and IPSEC with OSPF

By | May 9, 2016

Open Shortest Path First (OSPF) is a routing protocol for Internet Protocol (IP) networks. Because I have site-to-site OpenVPN and IPSEC tunnels between my primary and remote sites I ended up defining lots of static routes. The environment started to be complex enough to justify the use of OSPF that is supported by EdgeRouter. The… Read More »

EdgeRouter: Policy Based Routing for OpenVPN when Load Balancing dual WANs

By | May 26, 2017

Trying to fix my OpenVPN site-to-site link and due to the environment update I had to do some changes. The initial setup of the OpenVPN is here https://blog.voina.org/edgerouter-dual-wan-hair-pin-multiple-networks-openvpn-site-to-site-vpn/ First of all there is a new EdgeRouter ER-8 that is directly linked to the main ISP I got this from Amazon.de see Ubiquiti ER-8 Netzwerk/Router .… Read More »

EdgeRouter: Dual WAN + Hair Pin+ Multiple networks + OpenVPN site-to-site VPN

By | April 1, 2016

My setup becomes more and more complicated bellow there are the updated steps of my configurations with references to the original posts containing the partial configurations. STEP 1 EdgeRouter : Dual WAN with Hair Pin Initially I started with a dual-wan configuration with some extra setting to exclude from load balancing the hair pin connections:… Read More »

EdgeRouter: Dynamic DNS with afraid.org

By | July 11, 2016

I wanted to use for my site-to-site VPN connection some aliases in the configuration files. The simple solution was to configure some dynamic DNS aliases with afraid.org After creating an account and defining a site name like site1.mooo.com do the following from CLI configure set service dns dynamic interface eth0 service afraid host-name site1.mooo.com set… Read More »