Edge Router Lite Manual

Lite to a 3/4” plywood base Begin with a piece of 3⁄4' plywood (or hardwood) that is 8' wide. The length of the plywood should match the width of your router table. Clamp the plywood to the edge of your router table using (2) C-clamps. Mark the center of the plywoodʼs length and position the operatorʼs side of the Ultra Liteʼs.

Ubiquiti Edge Router Lite

The first thing I did when I was connected to the EdgeOS was to download the latest firmware from Ubiquiti for the EdgeRouter Lite. When you click the ‘System’ tab near the bottom, a screen comes up and allows you to upload the new firmware.
UBNT EdgeRouter Lite Setup Guide Battle(non)sense. In this video I show you how to setup your network using an EdgeRouter Lite, and how you can (ab)use an old router as Access Point + 4-port.
View and Download Ubiquiti EdgeRouter Lite ERLite-3 user manual online. EdgeRouter LITE 3-Port Router It is part of the EdgeMAX platform. EdgeRouter Lite ERLite-3 Network Router pdf manual download.
Need a manual for your Ubiquiti Networks EdgeRouter Lite Router? Below you can view and download the PDF manual for free. There are also frequently asked questions, a product rating and feedback from users to enable you to optimally use your product.

Ubiquiti EdgeRouter Lite
Available at Amazon, B&H, and Newegg for under $90 USD.

There are other members of the Ubiquiti EdgeRouter family that use this same v1.9.1 firmware, so this article likely applies to those folks as well, including:

ERLite-3 and ERPoe-5
ER-8, ERPro-8, and EP-R8
ER-X, ER-X-SFP, and EP-R6

Backstory

Within about 30 seconds of getting all my Windows and Linux PCs and VMs talking to each other on a firstname (short name) basis last summer, I fell for my new Ubiquiti EdgeRouter Lite, aka UBNT ERLite-3. This polite behavior was with plain old DHCP for these systems, no manual DNS tinkering on the clients required. Finally! Something no consumer router could do, running my home network and my home lab, together. When coupled with my new eero Wi-Fi in bridge-mode blanketing my home in as-fast-as-wired speeds, both my VMware VCSA 6.5 appliance and my family were finally all very happy indeed.

It wasn't hard to configure, and future articles will cover my exact configuration process, all using the web based GUI. I'd say it required intermediate skills to figure out, but once I get the details published, any home lab enthusiast can turn this pro-sumer router/ SOHO router into a consumer router that's no harder to use than the vast array of consumer routers out there. Only way faster, more better.

Gotchas

All that said, no networking product is perfect. The web changes. Regular firmware updates are today's reality. The minor bumps in the road that affected my configuration these last 7 months of ownership included:

firmware release 1.8.5 worked well, including L2TP over IPSec VPN tunnel functions from native Windows 10 and iOS VPNs
firmware release 1.9.0 worked well, except my occasionally-used L2TP over IPSec tunnel server feature wouldn't allow clients to reliably connect after that first successful connection

Dec 2016, firmware v1.9.1 arrives

EdgeMAX EdgeRouter software release v1.9.1
by Ubiquiti Employee UBNT-afomins ‎12-16-2016 07:09 AM - edited ‎12-22-2016 08:49 AM

I was relieved when I spotted this release. Just in time for my planned vSphere 6.5 follow-on to my popular how-to videos! I'm planning to use proper DHCP and DNS server configuration, much better than host file hacks on each system. This router as the short name, FQDN, and reverse lookup that VMware VCSA requires without the need for Active Directory, all for well under $90 USD. Also capable of processing a million packets per second, future-proofing my home for my next bump up in speeds from my current 300Mbps down/30Mbps up Cox Communications DOCIS 3.0 connection.

Of course, I quickly read the 1.9.1 release notes, and found comments in the forums that the following shortcomings are still present:

the OpenSSH VPN server doesn't support hardware offload (it does support L2TP hardware offload, but L2TP is less secure)
using dnsmasq for DHCP instead of the default DHCP server results in blank DHCP Lease information in the GUI

These weren't show-stoppers for me. I was just really wanting to be sure I was going to have a set of how to install vSphere 6.5 instructions without having to recommend a backlevel firmware to folks. I was also hopeful that 1.9.1 would offer an improved IPSEC VPN connection experience too. So I went and downloaded 1.9.1 and installed it, simple enough:

At first, good news! L2TP over IPSec now worked every connection, full VPN or split, from native Windows 10 and from iOS.

The sad trombone moment

But minute later, a new problem surfaced. I tried to visit my VMware vSphere 6.5 VCSA VM by short name:
https://vcsa
which used to work just fine, but now failed. Uh oh.

Did a bit of the usual nslookup and ping troubleshooting, and experienced the following:

So off to the friendly Ubiquiti forums I went, signing up for a free account, and posting my question there:

DNS resolution of shortnames (mostly) broken after I upgraded my EdgeRouter Lite from 1.9.0 to 1.9.1
‎12-27-2016 10:07 AM by c3f23686

To my amazement, a proposed workaround was posted by lanefu within about 10 hours, and it worked! For folks that have multiple DHCP servers configured, see also joemoor's comment. It's amazing the level of problem determination details that several folks presented, basically a free root cause analysis to the problem I was experiencing. Not something you see everyday.

There were also quickly reports of other folks noticing the same problem, adding to my new forum thread, and even a Ubiquiti employee chiming in

Looks like it the same issue as described here -> https://community.ubnt.com/t5/EdgeMAX/Edgerouter-dns-is-giving-me-the-sh/m-p/1771012#M140746

Bug ticket has already been created.

For my lab with a local domain of
lab.local
all I needed to do was the following fix.

The Fix Procedure

More of a workaround really, only needed only until the next firmware release:

ssh into my router, which is at 10.10.1.1 in my home, and authenticate to an admin account such as the default username ubnt
type
and press Enter
type
and press Enter
type
This saves the change to the working set of the router. Optionally, now you can take a moment to do a dhcp /renew on a Windows client, to be sure you're happy with the change, and to re-test that short name lookups such as ping vcsa (or some other home networked device with a DHCP reservation) functions.
type
This saves the configuration change to persist across reboots of the router, and across future upgrades of the router. It makes the one line DHCP configuration change permanent.
type
type

Video of the simple workaround

Success!

Now I have a 1.9.1 that behaves just like the prior releases, but now an IPSEC VPN server that is reliable too. Yay, I can move onward to other things.

Glad that little bump in the road wasn't hard to go over. Basically a one-liner workaround is needed only until the next release arrives, which is probably a few months away.

This overall Ubiquiti support experience is so vastly different from the many consumer routers I've used, so very much better. Real useful community and employee support, for free. This is a very comforting feeling. Know I know why so many folks feel good about their Ubiquiti products.

Hopefully my family and my router can now glide right through 2017 and beyond, with minimal fuss. Hopefully this article helps others glide right through with me!

Ubiquiti Edge Router Lite

Home Lab Fundamentals: DNS Reverse Lookup Zones
Jun 13 2016 by Frank Denneman at frankdenneman.nl
The recommendation is to use the FQDN.
Ensure that DNS reverse lookup returns an FQDN when queried with the IP address of the host machine on which vCenter Server is installed. When you install or upgrade vCenter Server, the installation or upgrade of the Web server component that supports the vSphere Web Client fails if the installer cannot look up the fully qualified domain name of the vCenter Server host machine from its IP address. Reverse lookup is implemented using PTR records.
If you plan to use an FQDN for the virtual machine or physical server, you must verify that the FQDN is resolvable.
Why the use of DNS “short names” should not be used as a strategy
Jun 22 2012 by Michael at Zebulak

Useromg