This is a tutorial video on how to install and configure a Ubiquiti EdgeRouter-X (ER-X) / UAP-AC-Lite combo. I focus on configuring the ER-X using the basic installation wizard and some best practices like hardware NAT offloading. The other part of the video is aimed at installing the Unified Access Point and adopting the UAP on the UniFi Controller. Link to EdgeMAX configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhnsDSCQit6jlk-sY Sources used: https://www.ubnt.com/download/unifi/ https://community.ubnt.com/t5/EdgeMAX/ERX-linespeed-performance-with-Hardware-offloading/td-p/1595817 https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-release-v1-8-5/ba-p/1591710 https://dl.ubnt.com/datasheets/edgemax/EdgeRouter_X_DS.pdf https://dl.ubnt.com/guides/edgemax/EdgeRouter_ER-X_QSG.pdf https://community.ubnt.com/t5/UniFi-Wireless/UAP-AC-LITE-rebooting-when-using-EdgeRouter-X-POE/td-p/1463348 https://community.ubnt.com/t5/EdgeMAX/PoE-with-EdgeRouter-X-and-UAP-AC-LITE/td-p/1721570

This CCIE oriented episode of quick configs goes into configuring the Local-AS alongside BGP neighbor statements. See http://bit.ly/1VZYkFi for all CCIE notes.

This video focuses adding multiple VLANs to the switch0 interface on an EdgeRouter. There are some caveats with configuring a vlan-aware switch0 while using the default LAN range (192.168.1.0/24). In this video I create two VLANs (1 and 10) and demonstrate why issues occur when we try to use the default LAN range without assigning it to VLAN 1. Link to EdgeMAX configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhnsDSCQit6jlk-sY Sources used: https://community.ubnt.com/t5/EdgeMAX/Can-t-reach-VLAN-from-LAN-or-viceversa/m-p/1779148 https://help.ubnt.com/hc/en-us/articles/204959444-EdgeMAX-InterVLAN-Walkthrough-with-ERLite-3-using-Sample-Enterprise-Topology

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at working with the command line interface (CLI) of a Ubiquiti EdgeMax device.

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring Source NAT (Network Address Translation) and Masquerade (Port Address Translation or PAT) on a Ubiquiti EdgeMax device.

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring a Ubiquiti EdgeMax device for first usage and will walk you through the initial setup.

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring basic WAN firewall filtering on a Ubiquiti EdgeMax device.

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring offloading (hardware acceleration on a Ubiquiti EdgeMax device. The amount of available options (NAT, IPsec, IPv4, IPv6, VLANs) depends on the Edgerouter model and software version.

This video focuses on blocking adult entertainment websites (apps) by using firewall categories and Deep Packet Inspection (DPI). This blocking relies on the workings of the traffic analysis feature which allows the EdgeRouter to view the contents of packets flowing through the device from LAN to WAN. This analysis is only implemented when traffic (I believe) is flowing through the firewall (WAN to LAN), so unless you have a firewall between your LAN interfaces (host to host), you will not see this specific traffic. This feature will only work for offloaded traffic on EdgeRouters other than the EdgeRouter-X (ER-X). For the EdgeRouter-X the DPI feature is supported for non-offloaded traffic. I have another video that focuses on enabling and configuring the traffic analysis feature. In this video I demonstrate blocking certain websites using the build-in categories as well as creating custom categories. The categories and apps are a Ubiquiti proprietary implementation, so we cannot add our own custom websites that we want to block. Some adult websites are listed under the Streaming-Media category. In most cases we do not want to block this entire category because it also hosts websites that do not categorize under 'adult entertainment' like YouTube and Vimeo. Before you configure this feature, you need to verify that the Topsites-Adult catogory is populated with entries. If it is empty, it might be due to the firmware version you are using, and an update is required. Link to EdgeMAX configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhnsDSCQit6jlk-sY Sources used: https://community.ubnt.com/t5/EdgeMAX/Traffic-analysis-details/td-p/1291916 https://help.ubnt.com/hc/en-us/articles/204951104-EdgeRouter-Deep-Packet-Inspection-Engine-for-EdgeRouter https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-release-v1-7-0/ba-p/1287631 https://community.ubnt.com/t5/EdgeMAX/Best-current-way-to-do-web-filtering-and-porn-block/td-p/1621550 https://help.ubnt.com/hc/en-us/articles/218732788-EdgeRouter-Create-a-Firewall-Rule-using-Deep-Packet-Inspection-DPI- https://community.ubnt.com/t5/EdgeMAX/TOP-SITES-ADULT/m-p/1783363/highlight/true https://community.ubnt.com/t5/EdgeMAX/DPI-Apps-quot-TopSites-quot-empty/td-p/1839004 https://community.ubnt.com/t5/EdgeMAX/DPI-Firewall-No-Entries-for-Top-Sites-Adult-but-fall-within/td-p/1757671 https://community.ubnt.com/t5/EdgeMAX/Does-TopSites-Adult-do-what-I-hope-it-does-amp-how-to-use/td-p/1509672

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring guest network access on a Ubiquiti EdgeMax device and associating firewall rules. Another section of the video focuses on virtual interfaces and VLANs.

This CCIE oriented episode of quick configs goes into configuring a QoS Policer and Shaper. See http://bit.ly/1VZYkFi for all CCIE notes.

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring port mirroring (span ports) on a Ubiquiti EdgeMax device.

This video focuses on combining an EdgeRouter with an Unified Access Point (UAP) and configuring trunks (tagged ports). In the example I am using an ER-X and a UAP-AC-LITE which will be configured with two WLANs, one for GUESTS and one for the LAN clients. The 'trusted' WLAN will be untagged in VLAN 1 (192.168.1.0/24), whereas the guest WLAN will be tagged with VLAN-id 10 (10.0.0.0/24). In the video I show you how to configure the EdgeRouter vlan-aware switch0 interface and some of the caveats and problems you might encounter. I also focus on setting up the UniFi controller and configuring the wireless networks and guest policies. Finally I show you how to disable the guest policies on the controller and instead run the guest policies (firewall rules) on the EdgeRouter. Link to EdgeMAX configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhnsDSCQit6jlk-sY Sources used: https://www.ubnt.com/download/unifi/ https://community.ubnt.com/t5/UniFi-Wireless/AP-management-vlan/td-p/695399 https://help.ubnt.com/hc/en-us/articles/218889067-EdgeRouter-How-to-Protect-a-Guest-Network-on-EdgeRouter https://help.ubnt.com/hc/en-us/articles/219654087-UniFi-Using-VLANs-with-UniFi-Wireless-Routing-Switching-Hardware https://blog.gruby.com/2015/07/05/setting-up-a-guest-network-with-the-edgerouter-lite/comment-page-1/ https://blog.gruby.com/2016/07/13/guest-network-with-edgerouter-lite-and-unifi-access-points-take-3/

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring destination nat using multiple external IP addresses on a Ubiquiti EdgeMax device. Destination NAT is useful to allow internal (web)servers to be reachable from the outside. Proxy-arp will also be discussed in this video.

OneDrive link to all Juniper Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgRGYIpMW0EaXH0HP This video is aimed at configuring 802.3ad LACP (Link Aggregation Control Protocol) using aggregated interface on a Juniper JunOS (SRX) device.

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring a Zone Based Firewall, defining zone-policies and associating firewall rules on a Ubiquiti EdgeMax device.

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring a switch interface on a Ubiquiti EdgeMax device and associating virtual interfaces and VLANs.

This video focuses on implementing the Traffic Analysis feature in conjunction with Deep Packet Inspection (DPI). The EdgeRouter uses DPI to view the contents of packets flowing through the device from LAN to WAN. This analysis is only implemented when traffic (I believe) is flowing through the firewall (WAN to LAN), so unless you have a firewall between your LAN interfaces (host to host), you will not see this specific traffic. This feature will only work for offloaded traffic on EdgeRouters other than the EdgeRouter-X (ER-X). For the EdgeRouter-X the DPI feature is supported for non-offloaded traffic. In the video I demonstrate that there are two modes of traffic analysis, the enable and the host-only mode. The enable mode is traffic analysis with DPI, the host only-mode only shows the bandwidth and the host that generated it. Link to EdgeMAX configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhnsDSCQit6jlk-sY Sources used: https://community.ubnt.com/t5/EdgeMAX/Traffic-analysis-details/td-p/1291916 https://help.ubnt.com/hc/en-us/articles/204951104-EdgeRouter-Deep-Packet-Inspection-Engine-for-EdgeRouter https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-release-v1-7-0/ba-p/1287631

This video focuses on blocking certain websites (apps) by using firewall categories and Deep Packet Inspection (DPI). This blocking relies on the workings of the traffic analysis feature which allows the EdgeRouter to view the contents of packets flowing through the device from LAN to WAN. This analysis is only implemented when traffic (I believe) is flowing through the firewall (WAN to LAN), so unless you have a firewall between your LAN interfaces (host to host), you will not see this specific traffic. This feature will only work for offloaded traffic on EdgeRouters other than the EdgeRouter-X (ER-X). For the EdgeRouter-X the DPI feature is supported for non-offloaded traffic. I have another video that focuses on enabling and configuring the traffic analysis feature. In this video I demonstrate blocking certain websites using the build-in categories as well as creating custom categories. The categories and apps are a Ubiquiti proprietary implementation, so we cannot add our own custom websites that we want to block. Link to EdgeMAX configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhnsDSCQit6jlk-sY Sources used: https://community.ubnt.com/t5/EdgeMAX/Traffic-analysis-details/td-p/1291916 https://help.ubnt.com/hc/en-us/articles/204951104-EdgeRouter-Deep-Packet-Inspection-Engine-for-EdgeRouter https://community.ubnt.com/t5/EdgeMAX-Updates-Blog/EdgeMAX-EdgeRouter-software-release-v1-7-0/ba-p/1287631 https://community.ubnt.com/t5/EdgeMAX/Best-way-to-setup-web-internet-filtering/td-p/1360021 https://help.ubnt.com/hc/en-us/articles/218732788-EdgeRouter-Create-a-Firewall-Rule-using-Deep-Packet-Inspection-DPI-

This video highlights the installation and configuration of a UniFi Contoller running in Amazon Web Services (AWS). The controller is running on Ubuntu 16.04 LTS in an EC2 instance assigned with an elastic IP address. Link to UniFi configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhmL-HfmO0TKIuo4P Sources used: https://aws.amazon.com/free/ https://help.ubnt.com/hc/en-us/articles/209376117-UniFi-Install-a-UniFi-Cloud-Controller-on-Amazon-Web-Services

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring DNSMASQ alongside DHCP on a Ubiquiti EdgeMax device. Thanks Logan. Link to DNSMASQ blog: https://loganmarchione.com/2016/08/edgerouter-lite-dnsmasq-setup/

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at working with the command line interface (CLI) of a Ubiquiti EdgeMax device.

This CCIE oriented episode of quick configs goes into configuring the Link Aggregation Control Protocol (LACP). See http://bit.ly/1VZYkFi for all CCIE notes.

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring a OpenVPN SSLVPN connection from a Windows PC to a Ubiquiti EdgeMax device and associating firewall rules. Link to Blog1: https://loganmarchione.com/2016/05/edgerouter-lite-openvpn-setup/ Link to Blog2: https://daywiss.wordpress.com/2015/07/23/openvpn-on-ubiquiti-edgerouter/

This video focuses on the Dual WAN Load-Balancing feature when using an EdgeRouter, in this example I am using an ER-X. In earlier versions of EdgeOS we had to rely on Policy Based Routing (PBR) in order to make this work. Luckily, since version 1.4.0 we can use the Load-Balancing Wizard to set this up. In the video I talk about load balancing, flows, sticky addresses, reachability tests, weighting and failover modes. Link to EdgeMAX configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhnsDSCQit6jlk-sY Sources used: https://help.ubnt.com/hc/en-us/articles/205145990-EdgeRouter-Dual-WAN-Load-Balance-Feature https://community.ubnt.com/t5/EdgeMAX/WAN-load-balancing-except-for-some-traffic/m-p/703541#M22098 https://samuel.kadolph.com/2015/02/mtu-and-tcp-mss-when-using-pppoe-2/

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring 802.3ad LACP (Link Aggregation Control Protocol) using interface bonding on a Ubiquiti EdgeMax device.

This video focuses on adding the adding Linux packages to the underlying linux shell that EdgeOS runs on. By default, the sources list (repositories) are empty, so you cannot install applications with apt-get for example. The solution is to add the Wheezy Debian repositories to the sources list at /etc/apt/sources.list. Even though the latest distribution of Debian is Jessie, the recommended repositories are still Wheezy. Link to EdgeMAX configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhnsDSCQit6jlk-sY Sources used: https://community.ubnt.com/t5/EdgeMAX/EdgeOS-1-8-Wheezy-or-Jessie/td-p/1520466 https://help.ubnt.com/hc/en-us/articles/205202560-EdgeRouter-Add-other-Debian-packages-to-EdgeOS http://xmodulo.com/useful-cli-tools-linux-system-admins.html

OneDrive link to config files: http://bit.ly/1qd3DDJ This video is aimed at JNCIA students and focuses on the workings of the junos command line interface (CLI).

This CCIE oriented episode of quick configs goes into configuring Unicast Reverse Path Forwarding (uRPF). See http://bit.ly/1VZYkFi for all CCIE notes.

OneDrive link to config files: http://bit.ly/1XEe9RP This video describes the default firewall zones and host inbound system services settings on a junos device.

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring a WAN firewall filter to limit management access to a Ubiquiti EdgeMax device.

This video focuses on the discovery and adoption of UniFi devices when the controller is in a different subnet/external location. The devices discover the controller using the inform URL. Layer 3 adoption is a process where this URL is changed to a custom value, which is the location (IP) of the UniFi controller. There are three different methods shown in this video, using the UBNT Discovery Tool, using SSH and manipulating the DHCP scope (option 43). Link to UniFi configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhmL-HfmO0TKIuo4P Sources used: https://help.ubnt.com/hc/en-us/articles/204909754-UniFi-Layer-3-methods-for-UAP-adoption-and-management

This CCIE oriented episode of quick configs goes into configuring Aggregation (summarization) for BGP. See http://bit.ly/1VZYkFi for all CCIE notes.

This video focuses on upgrading the firmware of UniFi device through the use of Secure Shell (SHH). In the video I demonstrate three method that uou can use to update your devices. Link to UniFi configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhmL-HfmO0TKIuo4P Sources used: https://help.ubnt.com/hc/en-us/articles/204910064-UniFi-Upgrading-firmware-image-via-SSH#firmware%20version https://www.ubnt.com/download/unifi/ https://help.ubnt.com/hc/en-us/articles/204909374-UniFi-What-is-the-default-username-password-for-UAPs-and-controller-

This video focuses on the PoE capabilities of the EdgeRouter X (ER-X) while powering Ubiquiti Access Points like the UAP-AC-LITE. There are three different ways to provide Power over Ethernet (PoE) using the EdgeRouter, and in this video I highlight all of them. Besides an explanation, this video also includes a basic demonstration of PoE passthrough and configuring the PoE Watchdog functionality. Link to EdgeMAX configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhnsDSCQit6jlk-sY Sources used: https://dl.ubnt.com/datasheets/edgemax/EdgeRouter_X_DS.pdf https://dl.ubnt.com/guides/edgemax/EdgeRouter_ER-X_QSG.pdf https://community.ubnt.com/t5/UniFi-Wireless/UAP-AC-LITE-rebooting-when-using-EdgeRouter-X-POE/td-p/1463348 https://community.ubnt.com/t5/EdgeMAX/PoE-with-EdgeRouter-X-and-UAP-AC-LITE/td-p/1721570 https://community.ubnt.com/t5/EdgeMAX/ERX-poe-watchdog/td-p/1652189

This CCIE oriented episode of quick configs goes into configuring Dynamic Multipoint VPN (DMVPN). See http://bit.ly/1VZYkFi for all CCIE notes.

This CCIE oriented episode of quick configs goes into configuring fall-over settings for BGP. See http://bit.ly/1VZYkFi for all CCIE notes.

OneDrive link to all IOS Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNhQpl8o_J9fqJuE7o This video is aimed at configuring PPP over Ethernet (PPPoE) on a Cisco IOS device. The audience of this demonstration is students studying the CCNA (200-120 / 200-125) or CCNP ROUTE (300-101) exams.

This CCIE oriented episode of quick configs goes into configuring a Dynamic Virtual Tunnel Interface (VTI). See http://bit.ly/1VZYkFi for all CCIE notes.

This CCIE oriented episode of quick configs goes into configuring Unequal Cost Multi-Path Load-Sharing (UCMP) for EIGRP. See http://bit.ly/1VZYkFi for all CCIE notes.

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring static 1 to 1 source Network Address Translation (NAT) on a Ubiquiti EdgeMax device. This configuration will ensure that internal services use the same addresses every time the IP is translated through NAT.

This video highlights the installation and configuration of a UniFi Contoller on a Raspberry Pi. I also focus on optimizing the performance by running the controller on Java 8. The Linux distro and hardware being used are Ubuntu Server on a Raspberry Pi 3 Model B. Link to UniFi configuration files: https://1drv.ms/f/s!AsuDsQ7TSDqNhmL-HfmO0TKIuo4P Sources used: https://community.ubnt.com/t5/UniFi-Wireless/Raspberry-Pi-3-Problems-getting-the-Unifi-Controller-Running/td-p/1558950 https://www.reddit.com/r/Ubiquiti/comments/5pch3l/raspberry_pi_unifi_install_cannot_locate_unifi/ https://erikvanpaassen.tweakblogs.net/blog/12480/turning-a-raspberry-pi-into-a-unifi-controller-appliance-(unifi-4-raspbian-jessie-oracle-java-8 https://loganmarchione.com/2016/11/ubiquiti-unifi-controller-setup-raspberry-pi-3/ http://www.lowefamily.com.au/2016/06/02/installing-ubiquiti-unifi-controller-5-on-raspberry-pi/3/

This CCIE oriented episode of quick configs goes into configuring AS_PATH tagging for BGP when redistributing other protocols tagged with route-tags. See http://bit.ly/1VZYkFi for all CCIE notes.

OneDrive link to config files: http://bit.ly/1V0AQ1W This video focuses on restoring a junos device and resetting to factory defaults.

OneDrive link to all Ubiquiti Video config files: https://1drv.ms/f/s!AsuDsQ7TSDqNgU3bHKtUeUIhAX1M This video is aimed at configuring Simple Network Management Protocol version 2c (SNMPv2c) on a Ubiquiti EdgeMax device. The Network Monitoring Station (NMS) that is used to receive the traffic is the Powerful Network Monitoring Software (PRTG).

This CCIE oriented episode of quick configs goes into configuring AS Prepending for BGP. See http://bit.ly/1VZYkFi for all CCIE notes.

This CCIE oriented episode of quick configs goes into using OSPF for Dynamic Multipoint VPN (DMVPN). See http://bit.ly/1VZYkFi for all CCIE notes.

Another CCIE oriented episode of quick? configs focused on the current implementation of NetFlow and previously used versions. See http://bit.ly/1VZYkFi for all CCIE notes.

This CCIE oriented episode of quick configs goes into Embedded Event Manager (EEM). See http://bit.ly/1VZYkFi for all CCIE notes.

This CCIE oriented episode of quick configs goes into configuring a QoS Weighted Randon Early Detection (WRED). See http://bit.ly/1VZYkFi for all CCIE notes.