Re: [Ubnt_users] airrouter and M900 fail to reconnect to aircontrol

[itguy]

I wish.  Passwd auth is enabled on both.  

-Original Message-
From: ubnt_users-boun...@wispa.org [mailto:ubnt_users-boun...@wispa.org] On
Behalf Of Edward H. Winters
Sent: Wednesday, June 08, 2016 12:08 PM
To: Ubiquiti Users Group
Subject: Re: [Ubnt_users] airrouter and M900 fail to reconnect to aircontrol

is passwd auth disabled?

On 06/08/2016 12:35 PM, it...@hcicomm.net wrote:
> This problem has plagued these units for the last month and they've 
> been rebooted a several times.  Just to be sure, I rebooted them again 
> but no change. L
>
> *From:*ubnt_users-boun...@wispa.org
> [mailto:ubnt_users-boun...@wispa.org] *On Behalf Of *Ty Featherling
> *Sent:* Wednesday, June 08, 2016 9:49 AM
> *To:* Ubiquiti Users Group
> *Subject:* Re: [Ubnt_users] airrouter and M900 fail to reconnect to 
> aircontrol
>
> Reboot the radio. I've seen this a bunch of times. I think it is a 
> memory leak. The bridge will function and the customer will be up but 
> all other services hang.
>
> On Jun 8, 2016 11:43 AM,  >
> wrote:
>
> Thank you.  Yes.  I already did that.   The credentials are correct.
> The ports are correct.  SSH is active.  Just attempted to ssh into 
> them via putty (ssh client) and the connection is refused before I 
> even gets to a login prompt.  The firewall on the devices is 
> deactivated / non-existent.  The airRouter is in SOHO Router mode 
> while the M900 is in Router mode.  Looks like maybe this is not an 
> aircontrol issue but a device issue.  Just strange that this happens 
> with two different devices.  Whenever I ssh over to another station, I 
> get to the login prompt so it's not a network issue and the other 
> stations are in the same subnet and geographically right next door to 
> these two offending devices.
>
> *From:*ubnt_users-boun...@wispa.org
> 
> [mailto:ubnt_users-boun...@wispa.org
> ] *On Behalf Of *Ridgetop 
> Networks
> *Sent:* Wednesday, June 08, 2016 7:45 AM
> *To:* Ubiquiti Users Group
> *Subject:* Re: [Ubnt_users] airrouter and M900 fail to reconnect to 
> aircontrol
>
> Try logging in to them manually with SSH. If you can get in that way, 
> go to Properties in AC2 and make sure the port and credentials are
correct.
>
> On Tue, Jun 7, 2016 at 6:12 PM,  > wrote:
>
> We have a small network and have been using aircontrol for a more than 
> a year now.  Before I upgraded from BETA 17, we had an issue with two
> devices: an airrouter and an M900 station (we still have the same 
> issue).  Whenever I tried and still when I try reconnecting them to 
> aircontrol the error I get is:
>
> *1 device(s) out of 1 have failed to reconnect*
>
> That's not too specific of course so not much help.  The 40 or so 
> other ubnt devices on our network connect just fine.  I've checked 
> firewall settings and they are correct for aircontrol - they should be 
> since the other device connect!  I've hunted online and can find no 
> solution.  Has anyone run into this problem?
>
> Note: this has been going on for weeks and I have rebooted both the 
> offending devices and the server AND I've upgraded from BETA 17 to 
> BETA
> 18 and then to BETA 22.  Any help would be greatly appreciated just 
> don't know what to do on this one.
>
> Thanks,
>
> Patrick - IT Guy
>
> HCI
>
> it...@hcicomm.net 
>
>
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org  
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
>
>
>
> --
>
> Andrew Kaiser
>
> Ridgetop Networks, LLC
> 417-543-5513 
>
> www.ridgetopnetworks.com 
>
>
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org  
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
>
>
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] UBNT Antenna Flaw

[Clay Stewart]

+1 TowerOne.

Also, a simple rig taught to me my my older tower rigging friend which
saves time, equipment and agrevation. Using a separate equipment rope long
enough to go to radio hieght + 10' and back. tied onto solid base anchor at
20-50' ft from base of tower. Connect equipment with proper tool lanyard
and/or carabiner to free end of equipment rope AND fixed anchor rope... to
allow equipment on tool lanyard slide up (and down).

|
|
0
|\\
| \\
|  \\
|   \*\*
||\
|  )[] \
|\
| *\ *
|  \ *0*
|   {|]}
|/\

Other words, never lift straight up, hitting everything and causing safety
issues, slider-on-up.

Must be Friday  ;') = 😁


On Thu, Jun 9, 2016 at 4:35 PM, Nigel Newallo-Singh <
nigel.newallosi...@greendotgroup.co> wrote:

> Agreed on getting up the tower in one piece :) that's always good.
>
> I had the guys from TowerOne do the training with my climbers, learnt lots
> of neat tricks on rigging/lifting and getting gear up the tower in one
> piece.
>
> On Thu, Jun 9, 2016 at 4:04 PM, Ray Orsini  wrote:
>
>> We refer to that as “the toaster principle”. The minute you notify the
>> customer of any change you immediately get “my toaster doesn’t work, my car
>> won’t start”
>>
>>
>>
>> Regards,
>>
>>
>>
>> *Ray Orsini – CEOOrsini IT, LLC – Technology Consultants**VOICE *–*DATA *
>> –* BANDWIDTH *–* SECURITY *–* SUPPORT*
>> *P**:* *305.967.6756 x1009 <305.967.6756%20x1009>*   *E: **r...@orsiniit.com
>> *   *TF:* *844.OIT.VOIP*
>> 7900 NW 155th Street, Suite 103, Miami Lakes, FL 33016
>> *http://www.orsiniit.com  | **View My Calendar
>> 
>> **| **View/Pay Your Invoices  | **View
>> Your Tickets
>> *
>>
>>
>>
>> *[image: oit_banner]*
>>
>>
>>
>> *From:* ubnt_users-boun...@wispa.org [mailto:ubnt_users-boun...@wispa.org]
>> *On Behalf Of *Ty Featherling
>> *Sent:* Thursday, June 9, 2016 9:56 AM
>> *To:* Ubiquiti Users Group 
>> *Subject:* Re: [Ubnt_users] UBNT Antenna Flaw
>>
>>
>>
>> "My wife doesn't like me."
>>
>> "I have athlete's foot."
>>
>> "My job sucks."
>>
>> "My kids are assholes."
>>
>>
>>
>> Those complaints.
>>
>>
>>
>>
>>
>>
>> -Ty
>>
>>
>>
>> On Thu, Jun 9, 2016 at 8:26 AM, Shawn C. Peppers <
>> videodirectwispal...@gmail.com> wrote:
>>
>> What kind of complaints?
>>
>> Shawn C. Peppers
>>
>> Video Direct Satellite & Entertainment
>>
>> 866-680-8433 Toll Free
>>
>> 480-287-9960 Fax
>>
>> http://www.video-direct.tv
>>
>>
>> On Jun 9, 2016, at 8:22 AM, Aaron McKillip <
>> aaron.mckil...@hamiltontel.com> wrote:
>>
>> We were having issues with the sector. After changing everything except
>> the antenna we swapped it out. All of our issues and customer complaints
>> went away. After some investigation, We found that the Antenna had water
>> intrusion in it. The water is coming in through the screws that hold the
>> circuit board to the housing.
>>
>>
>>
>> *Aaron McKillip*
>>
>> *Hamilton.net *
>> --
>>
>> CONFIDENTIALITY NOTE:
>> This email and any attachments are confidential and may be protected by
>> legal privilege.
>> If you have received this email in error, please immediately notify the
>> sender by return email
>> and delete all copies of this email.
>> --
>>
>> <20160609_130712651_iOS.jpg>
>>
>> ___
>> Ubnt_users mailing list
>> Ubnt_users@wispa.org
>> http://lists.wispa.org/mailman/listinfo/ubnt_users
>>
>>
>> ___
>> Ubnt_users mailing list
>> Ubnt_users@wispa.org
>> http://lists.wispa.org/mailman/listinfo/ubnt_users
>>
>>
>>
>> ___
>> Ubnt_users mailing list
>> Ubnt_users@wispa.org
>> http://lists.wispa.org/mailman/listinfo/ubnt_users
>>
>>
>
>
> --
> Warm Regards,
> Nigel Newallo-Singh
>
> http://www.gd.tt/
>
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
>


-- 


-- 
Clay Stewart, COO/CTO
SCS Broadband
A Division of Acelanet, LLC
  434.263.6363 O
  434.942.6510 C
  cstew...@scsbroadband.com
“We Keep You Up and Running”

Please send sales inquiries to sa...@scsbroadband.com
Please send service/repair requests to supp...@scsbroadband.com
___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] EdgeOS conntrack tuning

[James Craig via Ubnt_users]

I should also add the every CLI option is configurable via GUI on the
ConfigTree tab.


Conntrack values can be tweaked in System - > Connntrack.




On Fri, Jun 10, 2016 at 1:28 PM, Andrew Duey <
andrew.d...@widerangebroadband.net> wrote:

> Scott,
>To answer your questions, I do not have any junipers or real Cisco
> units in the network.  I've worked with a few smaller Cisco units but
> nothing of even the same caliber.  I only have a handful of the EdgeRouter
> Pro's at each site I support.  For the ISP network we have a pair of
> EdgeRouter Pro's at the core and then have Mikrotik at all the tower
> sites.  We had been using Vyatta for years before Brocade bought them and
> burnt all bridges with me (what a terrible, worthless, corporate greed
> driven company).
>
> --Andrew
>
>
> On Friday, June 10, 2016, Scott Lambert  wrote:
>
>> Thank you for the reply.  I would not keep attempting to make the WebUI
>> work, except the guy paying me to set these up specifically does not
>> want to type more than he has to.   He's not much of a typist.
>>
>> If i could find an equivalent of RouterOS's "/interface monitor-traffic
>> ether1" or cisco's "show interfaces GigabitEthernet 0/3", I would never
>> load EdgeOS's heavy WebUI.
>>
>> I just compared the connection tracking timeouts between EdgeOS and
>> RouterOS.
>>
>> It looks to me like RouterOS is at least three times as aggressive
>> about getting rid of connections which were likely to be malicious
>> traffic.  It also looks to me as though RouterOS autoscales the size of
>> the connection tracking table when it gets "too full"; whatever "too
>> full" means.
>>
>> The minimum size I've seen is 88088 entries, the maximum on my network
>> is somewhere over 472,000 entries on a box which has lots of firewall
>> rules, does NAT, and passes 800Mbps during peak hours for more than 1500
>> users.  That box is using less than 1GB of RAM.  Maybe I'll just set all
>> of the EdgeRouters to use similar settings to that CCR1036.
>>
>> Just out of curiosity, how many EdgeRouters do you have deployed?
>>
>> Do you use anything between the Juniper and the EdgeRouter Pro?
>>
>> I'm at around 100 RouterOS routers in the ISP network.  Several more
>> at client businesses.  In ISP networks, I've only used about 10
>> ImageStreams and a few dozen Ciscos.  No Junipers, yet.
>>
>> The Ciscos are hands down the reliability champs, followed by
>> ImageStream, then RouterOS, then the EdgeRouters, in my experience so
>> far.
>>
>> Like you said, it's hard to justify the big brands when MikroTik and
>> Ubiquiti have such low cost options in the CCR1009s and the EdgeRouter
>> Pros.
>>
>> I better get back to looking up how to setup GRE tunnels across the
>> Internet and run OSPF across them as a backup path for when the network
>> gets partitioned internally on the EdgeRouters.
>>
>> On Thu, Jun 09, 2016 at 11:05:03PM -0500, Andrew Duey wrote:
>> > Scott,
>> >
>> > We have been running the EdgeRouter Pro's for at least a year now and
>> ran
>> > Vyatta for a couple years before that.  After reading your frustrations
>> > here's a couple observations:
>> >
>> > 1) We do NO NAT in our Edgerouters now, but when we did in Vyatta we had
>> > the same conntrack issues.  We found you could increase the table size
>> > dramatically and that fixed our problems until we could un-NAT
>> everything.
>> > I would recommend not doing NAT on those units at all but if you have to
>> > you can increase the table sizes to help.
>> >
>> > 2) Ours have been crazy stable (given the very low cost of the units).
>> >
>> > 3) The web gui is only useful for viewing real-time network
>> information.  I
>> > do like that you can see real-time traffic counts, see how routing
>> changes
>> > take effect, and see an outage in a heartbeat but the web guy is for
>> > information only.  I would STRONGLY recommend that in an ISP environment
>> > that ALL configuration be done at the command line.  I found it very
>> > friendly and easy to use, and there used to be TONS of peer Vyatta
>> support
>> > out there  (Brocade killed a lot of it, but there's still a lot left in
>> > other places).
>> >
>> > 4) While UBNT's direct support is crap on a good day, I've found that
>> their
>> > forums have 90% of the answers I'm looking for and the rest can be
>> gotten
>> > with my googlefu and searching for Vyatta examples.
>> >
>> > While the $400 EdgeRouter Pro is no Juniper MX160 I've found that they
>> are
>> > amazing little boxes given their price point.  We make a point to always
>> > keep at least one spare on hand and run them in pairs anyway but so far
>> > haven't needed to worry about them too much (knock on wood).
>> >
>> > Best of luck with them
>> > --Andrew Duey
>> >
>> > On Thursday, June 9, 2016, Scott Lambert 
>> wrote:
>> >
>> > > Warning, this message has not been well editted.  I don't have time to
>> > > go back and get it to try to get the tone to match what is intended.
>> I
>> > > have limitted time 

Re: [Ubnt_users] EdgeOS conntrack tuning

[Andrew Duey]

Scott,
   To answer your questions, I do not have any junipers or real Cisco units
in the network.  I've worked with a few smaller Cisco units but nothing of
even the same caliber.  I only have a handful of the EdgeRouter Pro's at
each site I support.  For the ISP network we have a pair of EdgeRouter
Pro's at the core and then have Mikrotik at all the tower sites.  We had
been using Vyatta for years before Brocade bought them and burnt all
bridges with me (what a terrible, worthless, corporate greed driven
company).

--Andrew

On Friday, June 10, 2016, Scott Lambert  wrote:

> Thank you for the reply.  I would not keep attempting to make the WebUI
> work, except the guy paying me to set these up specifically does not
> want to type more than he has to.   He's not much of a typist.
>
> If i could find an equivalent of RouterOS's "/interface monitor-traffic
> ether1" or cisco's "show interfaces GigabitEthernet 0/3", I would never
> load EdgeOS's heavy WebUI.
>
> I just compared the connection tracking timeouts between EdgeOS and
> RouterOS.
>
> It looks to me like RouterOS is at least three times as aggressive
> about getting rid of connections which were likely to be malicious
> traffic.  It also looks to me as though RouterOS autoscales the size of
> the connection tracking table when it gets "too full"; whatever "too
> full" means.
>
> The minimum size I've seen is 88088 entries, the maximum on my network
> is somewhere over 472,000 entries on a box which has lots of firewall
> rules, does NAT, and passes 800Mbps during peak hours for more than 1500
> users.  That box is using less than 1GB of RAM.  Maybe I'll just set all
> of the EdgeRouters to use similar settings to that CCR1036.
>
> Just out of curiosity, how many EdgeRouters do you have deployed?
>
> Do you use anything between the Juniper and the EdgeRouter Pro?
>
> I'm at around 100 RouterOS routers in the ISP network.  Several more
> at client businesses.  In ISP networks, I've only used about 10
> ImageStreams and a few dozen Ciscos.  No Junipers, yet.
>
> The Ciscos are hands down the reliability champs, followed by
> ImageStream, then RouterOS, then the EdgeRouters, in my experience so
> far.
>
> Like you said, it's hard to justify the big brands when MikroTik and
> Ubiquiti have such low cost options in the CCR1009s and the EdgeRouter
> Pros.
>
> I better get back to looking up how to setup GRE tunnels across the
> Internet and run OSPF across them as a backup path for when the network
> gets partitioned internally on the EdgeRouters.
>
> On Thu, Jun 09, 2016 at 11:05:03PM -0500, Andrew Duey wrote:
> > Scott,
> >
> > We have been running the EdgeRouter Pro's for at least a year now and ran
> > Vyatta for a couple years before that.  After reading your frustrations
> > here's a couple observations:
> >
> > 1) We do NO NAT in our Edgerouters now, but when we did in Vyatta we had
> > the same conntrack issues.  We found you could increase the table size
> > dramatically and that fixed our problems until we could un-NAT
> everything.
> > I would recommend not doing NAT on those units at all but if you have to
> > you can increase the table sizes to help.
> >
> > 2) Ours have been crazy stable (given the very low cost of the units).
> >
> > 3) The web gui is only useful for viewing real-time network
> information.  I
> > do like that you can see real-time traffic counts, see how routing
> changes
> > take effect, and see an outage in a heartbeat but the web guy is for
> > information only.  I would STRONGLY recommend that in an ISP environment
> > that ALL configuration be done at the command line.  I found it very
> > friendly and easy to use, and there used to be TONS of peer Vyatta
> support
> > out there  (Brocade killed a lot of it, but there's still a lot left in
> > other places).
> >
> > 4) While UBNT's direct support is crap on a good day, I've found that
> their
> > forums have 90% of the answers I'm looking for and the rest can be gotten
> > with my googlefu and searching for Vyatta examples.
> >
> > While the $400 EdgeRouter Pro is no Juniper MX160 I've found that they
> are
> > amazing little boxes given their price point.  We make a point to always
> > keep at least one spare on hand and run them in pairs anyway but so far
> > haven't needed to worry about them too much (knock on wood).
> >
> > Best of luck with them
> > --Andrew Duey
> >
> > On Thursday, June 9, 2016, Scott Lambert  > wrote:
> >
> > > Warning, this message has not been well editted.  I don't have time to
> > > go back and get it to try to get the tone to match what is intended.  I
> > > have limitted time onsite during which to try to fix issues.  However
> > > "rant"y this sounds, it should sound like frustration rather than
> anger.
> > >
> > > I am helping an ISP owner who is trying to transition from one big
> > > bridge to a mostly routed network.  He had ImageStream routers at three
> > > points, two points were BGP upstreams where there is not really enough
>

[Ubnt_users] Vacation

[fcaceres]

Saludos :
 
Durante el periodo del 10 al 17 de junio 2016, estaré de vacaciones. De 
necesitar comunicarse o tener una emergencia favor llamar a la oficina al 
787-879-5755

Atentamente,
Francisco Cáceres

---
Hi,

I am out of the office from june 10-17. If you need assistance please call our 
office at 787-879-5755

Att
Francisco Cáceres



___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] Does AirPrism GPS sync work for AirPrism

[Brandon Gilles via Ubnt_users]

Hi Nigel,

Sorry for the confusion here.

So with newer firmware you can put them in station mode for PTP.  7.1.4+
for US and 7.1.5+ for worldwide actually support every operating mode.

Best Regards,
Brandon

On Thu, Jun 9, 2016 at 10:49 PM, Nigel Newallo-Singh <
nigel.newallosi...@greendotgroup.co> wrote:

> Just bought 4 of these airPrism Rocket AC.
>
> A little disappointed I can't put them in station mode and use as PTP. I
> have done this with the RocketM5s for Customers wanting higher bandwidth.
>
> Swapping out the older RocketAC next week to see how the airPrism works
>
> On Wed, Jun 8, 2016 at 6:45 PM, David Jones 
> wrote:
>
>> Nope but
>>
>> SOON!!!
>>
>> On Wed, Jun 8, 2016 at 2:54 PM, Rory Conaway 
>> wrote:
>>
>>>
>>>
>>>
>>>
>>> *Rory Conaway **• Triad Wireless •** CEO*
>>>
>>> *4226 S. 37th Street • Phoenix • AZ 85040*
>>>
>>> *602-426-0542 <602-426-0542>*
>>>
>>> *r...@triadwireless.net *
>>>
>>> *www.triadwireless.net *
>>>
>>>
>>>
>>> “In Baseball Heaven …. The balls in the batting cage pick themselves
>>> up.”  - Lessons from Baseball
>>>
>>>
>>>
>>>
>>>
>>> ___
>>> Ubnt_users mailing list
>>> Ubnt_users@wispa.org
>>> http://lists.wispa.org/mailman/listinfo/ubnt_users
>>>
>>>
>>
>>
>> --
>> David Jones
>> NGL Connection
>> 307-288-5491 ext 702
>>
>> ___
>> Ubnt_users mailing list
>> Ubnt_users@wispa.org
>> http://lists.wispa.org/mailman/listinfo/ubnt_users
>>
>>
>
>
> --
> Warm Regards,
> Nigel Newallo-Singh
>
> http://www.gd.tt/
>
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
>
___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] EdgeRouter and Client NON-Payment Disconnects

[Timothy D. Hittesdorf]

You should be able to setup a permanent subnet in the EdgeRouter with the 
dstnat to the non-pay page.  Then just move the customer into a reservation in 
that pool with either DHCP or PPPoE.  Once they renew with DHCP or you kick 
them with PPPoE, they’ll get the page.

From:  on behalf of Shawn Burgei 

Reply-To: Ubiquiti Users Group 
Date: Friday, June 10, 2016 at 9:08 AM
To: 'Ubiquiti Users Group' , "members-boun...@wispa.org" 

Subject: [Ubnt_users] EdgeRouter and Client NON-Payment Disconnects

We are using the UBNT EdgeRouter as our main router. When we disconnect clients 
for NON-Payment we are trying to figure out a way for the browser to show 
“DISCONNECTED FOR NON-PAYMENT.” Right now it obviously shows “PAGE NOT 
DISPLAYED.” Has anyone else done this on the EDGEROUTER? Our billing software 
is VISP, and that does not work with EDGEROUTER.

THANKS IN ADVANCE!!
Shawn

___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] EdgeRouter and Client NON-Payment Disconnects

[Josh Luthman]

Those are probably too dumb

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373
On Jun 10, 2016 10:45 AM, "Shawn Burgei"  wrote:

> We use tplink routers on the client side, has anyone done this with those?
>
>
>
> [image: hder-link-logo-SM]
>
> Shawn Burgei
> Owner / Technician
> PO Box 83
> 2600 State Highway 568, Suite E
> Carey, Ohio 43316
> O: 419-396-3815 C: 419-672-9057
> sbur...@hderlink.com
> www.hderlink.com
> www.facebook.com/hderlink
>
>
>
> *From:* ubnt_users-boun...@wispa.org [mailto:ubnt_users-boun...@wispa.org]
> *On Behalf Of *Josh Luthman
> *Sent:* Friday, June 10, 2016 10:17 AM
> *To:* Ubiquiti Users Group 
> *Cc:* members-boun...@wispa.org
> *Subject:* Re: [Ubnt_users] EdgeRouter and Client NON-Payment Disconnects
>
>
>
> Firewall dstnat to a web server that shows said page.
>
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>
> On Jun 10, 2016 10:14 AM, "Shawn Burgei"  wrote:
>
> We are using the UBNT EdgeRouter as our main router. When we disconnect
> clients for NON-Payment we are trying to figure out a way for the browser
> to show “DISCONNECTED FOR NON-PAYMENT.” Right now it obviously shows “PAGE
> NOT DISPLAYED.” Has anyone else done this on the EDGEROUTER? Our billing
> software is VISP, and that does not work with EDGEROUTER.
>
>
>
> THANKS IN ADVANCE!!
>
> Shawn
>
>
>
>
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
>
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
>
___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] EdgeRouter and Client NON-Payment Disconnects

[Shawn Burgei]

We use tplink routers on the client side, has anyone done this with those?

 



Shawn Burgei
Owner / Technician
PO Box 83
2600 State Highway 568, Suite E
Carey, Ohio 43316
O: 419-396-3815 C: 419-672-9057
sbur...@hderlink.com
  www.hderlink.com
www.facebook.com/hderlink

 

From: ubnt_users-boun...@wispa.org [mailto:ubnt_users-boun...@wispa.org] On 
Behalf Of Josh Luthman
Sent: Friday, June 10, 2016 10:17 AM
To: Ubiquiti Users Group 
Cc: members-boun...@wispa.org
Subject: Re: [Ubnt_users] EdgeRouter and Client NON-Payment Disconnects

 

Firewall dstnat to a web server that shows said page.

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

On Jun 10, 2016 10:14 AM, "Shawn Burgei" mailto:sbur...@hderlink.com> > wrote:

We are using the UBNT EdgeRouter as our main router. When we disconnect clients 
for NON-Payment we are trying to figure out a way for the browser to show 
“DISCONNECTED FOR NON-PAYMENT.” Right now it obviously shows “PAGE NOT 
DISPLAYED.” Has anyone else done this on the EDGEROUTER? Our billing software 
is VISP, and that does not work with EDGEROUTER. 

 

THANKS IN ADVANCE!!

Shawn

 


___
Ubnt_users mailing list
Ubnt_users@wispa.org  
http://lists.wispa.org/mailman/listinfo/ubnt_users

___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] EdgeRouter and Client NON-Payment Disconnects

[Josh Luthman]

Either.  I'd do it at the customer if you can (avoid messing with other
customers).

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373
On Jun 10, 2016 10:19 AM, "Shawn Burgei"  wrote:

> Do you this from the EDGEROUTER? Or Client Router?
>
>
>
> *From:* ubnt_users-boun...@wispa.org [mailto:ubnt_users-boun...@wispa.org]
> *On Behalf Of *Josh Luthman
> *Sent:* Friday, June 10, 2016 10:17 AM
> *To:* Ubiquiti Users Group 
> *Cc:* members-boun...@wispa.org
> *Subject:* Re: [Ubnt_users] EdgeRouter and Client NON-Payment Disconnects
>
>
>
> Firewall dstnat to a web server that shows said page.
>
> Josh Luthman
> Office: 937-552-2340
> Direct: 937-552-2343
> 1100 Wayne St
> Suite 1337
> Troy, OH 45373
>
> On Jun 10, 2016 10:14 AM, "Shawn Burgei"  wrote:
>
> We are using the UBNT EdgeRouter as our main router. When we disconnect
> clients for NON-Payment we are trying to figure out a way for the browser
> to show “DISCONNECTED FOR NON-PAYMENT.” Right now it obviously shows “PAGE
> NOT DISPLAYED.” Has anyone else done this on the EDGEROUTER? Our billing
> software is VISP, and that does not work with EDGEROUTER.
>
>
>
> THANKS IN ADVANCE!!
>
> Shawn
>
>
>
>
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
>
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
>
___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] EdgeRouter and Client NON-Payment Disconnects

[Shawn Burgei]

Do you this from the EDGEROUTER? Or Client Router?

 

From: ubnt_users-boun...@wispa.org [mailto:ubnt_users-boun...@wispa.org] On 
Behalf Of Josh Luthman
Sent: Friday, June 10, 2016 10:17 AM
To: Ubiquiti Users Group 
Cc: members-boun...@wispa.org
Subject: Re: [Ubnt_users] EdgeRouter and Client NON-Payment Disconnects

 

Firewall dstnat to a web server that shows said page.

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373

On Jun 10, 2016 10:14 AM, "Shawn Burgei" mailto:sbur...@hderlink.com> > wrote:

We are using the UBNT EdgeRouter as our main router. When we disconnect clients 
for NON-Payment we are trying to figure out a way for the browser to show 
“DISCONNECTED FOR NON-PAYMENT.” Right now it obviously shows “PAGE NOT 
DISPLAYED.” Has anyone else done this on the EDGEROUTER? Our billing software 
is VISP, and that does not work with EDGEROUTER. 

 

THANKS IN ADVANCE!!

Shawn

 


___
Ubnt_users mailing list
Ubnt_users@wispa.org  
http://lists.wispa.org/mailman/listinfo/ubnt_users

___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] EdgeRouter and Client NON-Payment Disconnects

[Josh Luthman]

Firewall dstnat to a web server that shows said page.

Josh Luthman
Office: 937-552-2340
Direct: 937-552-2343
1100 Wayne St
Suite 1337
Troy, OH 45373
On Jun 10, 2016 10:14 AM, "Shawn Burgei"  wrote:

> We are using the UBNT EdgeRouter as our main router. When we disconnect
> clients for NON-Payment we are trying to figure out a way for the browser
> to show “DISCONNECTED FOR NON-PAYMENT.” Right now it obviously shows “PAGE
> NOT DISPLAYED.” Has anyone else done this on the EDGEROUTER? Our billing
> software is VISP, and that does not work with EDGEROUTER.
>
>
>
> THANKS IN ADVANCE!!
>
> Shawn
>
>
>
> ___
> Ubnt_users mailing list
> Ubnt_users@wispa.org
> http://lists.wispa.org/mailman/listinfo/ubnt_users
>
>
___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

[Ubnt_users] EdgeRouter and Client NON-Payment Disconnects

[Shawn Burgei]

We are using the UBNT EdgeRouter as our main router. When we disconnect
clients for NON-Payment we are trying to figure out a way for the browser
to show "DISCONNECTED FOR NON-PAYMENT." Right now it obviously shows "PAGE
NOT DISPLAYED." Has anyone else done this on the EDGEROUTER? Our billing
software is VISP, and that does not work with EDGEROUTER. 

 

THANKS IN ADVANCE!!

Shawn

 

___
Ubnt_users mailing list
Ubnt_users@wispa.org
http://lists.wispa.org/mailman/listinfo/ubnt_users

Re: [Ubnt_users] EdgeOS conntrack tuning

[Matt Hoppes]

Scott,
Try this. You do really need to increase your contrack size from defaults. 

262144  
   tcp 
{  
  half-open-connections 512 
   loose enable   
 max-retrans 3

> On Jun 10, 2016, at 01:33, Scott Lambert  wrote:
> 
> Thank you for the reply.  I would not keep attempting to make the WebUI
> work, except the guy paying me to set these up specifically does not
> want to type more than he has to.   He's not much of a typist.
> 
> If i could find an equivalent of RouterOS's "/interface monitor-traffic
> ether1" or cisco's "show interfaces GigabitEthernet 0/3", I would never
> load EdgeOS's heavy WebUI.
> 
> I just compared the connection tracking timeouts between EdgeOS and RouterOS.
> 
> It looks to me like RouterOS is at least three times as aggressive
> about getting rid of connections which were likely to be malicious
> traffic.  It also looks to me as though RouterOS autoscales the size of
> the connection tracking table when it gets "too full"; whatever "too
> full" means.  
> 
> The minimum size I've seen is 88088 entries, the maximum on my network
> is somewhere over 472,000 entries on a box which has lots of firewall
> rules, does NAT, and passes 800Mbps during peak hours for more than 1500
> users.  That box is using less than 1GB of RAM.  Maybe I'll just set all
> of the EdgeRouters to use similar settings to that CCR1036.
> 
> Just out of curiosity, how many EdgeRouters do you have deployed?
> 
> Do you use anything between the Juniper and the EdgeRouter Pro?
> 
> I'm at around 100 RouterOS routers in the ISP network.  Several more
> at client businesses.  In ISP networks, I've only used about 10
> ImageStreams and a few dozen Ciscos.  No Junipers, yet.  
> 
> The Ciscos are hands down the reliability champs, followed by
> ImageStream, then RouterOS, then the EdgeRouters, in my experience so
> far.  
> 
> Like you said, it's hard to justify the big brands when MikroTik and
> Ubiquiti have such low cost options in the CCR1009s and the EdgeRouter
> Pros.
> 
> I better get back to looking up how to setup GRE tunnels across the
> Internet and run OSPF across them as a backup path for when the network
> gets partitioned internally on the EdgeRouters.
> 
>> On Thu, Jun 09, 2016 at 11:05:03PM -0500, Andrew Duey wrote:
>> Scott,
>> 
>> We have been running the EdgeRouter Pro's for at least a year now and ran
>> Vyatta for a couple years before that.  After reading your frustrations
>> here's a couple observations:
>> 
>> 1) We do NO NAT in our Edgerouters now, but when we did in Vyatta we had
>> the same conntrack issues.  We found you could increase the table size
>> dramatically and that fixed our problems until we could un-NAT everything.
>> I would recommend not doing NAT on those units at all but if you have to
>> you can increase the table sizes to help.
>> 
>> 2) Ours have been crazy stable (given the very low cost of the units).
>> 
>> 3) The web gui is only useful for viewing real-time network information.  I
>> do like that you can see real-time traffic counts, see how routing changes
>> take effect, and see an outage in a heartbeat but the web guy is for
>> information only.  I would STRONGLY recommend that in an ISP environment
>> that ALL configuration be done at the command line.  I found it very
>> friendly and easy to use, and there used to be TONS of peer Vyatta support
>> out there  (Brocade killed a lot of it, but there's still a lot left in
>> other places).
>> 
>> 4) While UBNT's direct support is crap on a good day, I've found that their
>> forums have 90% of the answers I'm looking for and the rest can be gotten
>> with my googlefu and searching for Vyatta examples.
>> 
>> While the $400 EdgeRouter Pro is no Juniper MX160 I've found that they are
>> amazing little boxes given their price point.  We make a point to always
>> keep at least one spare on hand and run them in pairs anyway but so far
>> haven't needed to worry about them too much (knock on wood).
>> 
>> Best of luck with them
>> --Andrew Duey
>> 
>>> On Thursday, June 9, 2016, Scott Lambert  wrote:
>>> 
>>> Warning, this message has not been well editted.  I don't have time to
>>> go back and get it to try to get the tone to match what is intended.  I
>>> have limitted time onsite during which to try to fix issues.  However
>>> "rant"y this sounds, it should sound like frustration rather than anger.
>>> 
>>> I am helping an ISP owner who is trying to transition from one big
>>> bridge to a mostly routed network.  He had ImageStream routers at three
>>> points, two points were BGP upstreams where there is not really enough
>>> bandwidth between the sites to fail over gracefully.  We are working on
>>> that too.
>>> 
>>> Last summer, he started running in