Reply
Emerging Member
Posts: 85
Registered: ‎06-25-2015
Kudos: 26
Solutions: 1

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

@adminmat - If you just have the single ubiquiti router, then why do you need UNMS? You only have one device to manage so I wouldn't bother investing in the Cloud Key.

New Member
Posts: 7
Registered: ‎07-26-2017

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

I purchased 2 x ER-X for a client with two sites, installed v1.10.8 on both and used the load-balancing wizard for 2 WANs (although only used 1 WAN at both sites, leaving the second WAN for failover and later use). 

 

I then setup an IPSEC tunnel with 3DES/SHA1 between Site A and Site B. Everything appeared to be working, until I found that some traffic wasn't traversing the tunnel properly. Computers at Site B couldn't auth to domain controllers at Site A, lots of group policy errors, slow logins, some line of business applications weren't working etc... however addresses pinged, file shares were accessible, internet traffic worked. 

 

I couldn't spend a lot of time investigating due to the impact on the client. I did perform a number of reboots and checked other infrastructure in the environment though which all checked out. I downgraded Site B to v1.10.3 and the problem was fixed immediately. Not sure on how to proceed, but thought I'd post this up in case anyone else experiences something similar.

 

Thanks. 

Regular Member
Posts: 579
Registered: ‎11-19-2012
Kudos: 305
Solutions: 6

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

[ Edited ]

@jtayThis sounds to me suspiciously like it might be an MTU problem, rather than a specific problem with v1.10.8 - maybe first try to use the wizard to adjust MSS at both ends to 1300 and see if your problems go away - if not, possibly move your question to the main edgerouter forum? 

Senior Member
Posts: 2,840
Registered: ‎05-19-2013
Kudos: 1252
Solutions: 26

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!


@jtay wrote:

I purchased 2 x ER-X for a client with two sites, installed v1.10.8 on both and used the load-balancing wizard for 2 WANs (although only used 1 WAN at both sites, leaving the second WAN for failover and later use). 

 

I then setup an IPSEC tunnel with 3DES/SHA1 between Site A and Site B. Everything appeared to be working, until I found that some traffic wasn't traversing the tunnel properly. Computers at Site B couldn't auth to domain controllers at Site A, lots of group policy errors, slow logins, some line of business applications weren't working etc... however addresses pinged, file shares were accessible, internet traffic worked. 

 

I couldn't spend a lot of time investigating due to the impact on the client. I did perform a number of reboots and checked other infrastructure in the environment though which all checked out. I downgraded Site B to v1.10.3 and the problem was fixed immediately. Not sure on how to proceed, but thought I'd post this up in case anyone else experiences something similar.

 

Thanks. 


Just a thought. Is the Active Directory properly setup to recognize the subnet and routing cost across the IPSec tunnel?

I am rusty but I used to handle many of such domain authentication issue and usually it is due to the new subnet across the tunnel is not configured in the Active Directory (not sure which MMC now where subnet is to set up since I stopped doing all these at Win 2003 AD).

New Member
Posts: 32
Registered: ‎09-17-2015
Kudos: 1
Solutions: 4

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

yeah, ERPOE-5 firmware v1.10.8 running fine, but L2TP-IPSEC not working for me.

Revert back to v1.10.7, looking thread and disable offloading ipsec L2TP-IPSEC it's work..

I thing issue bug offloading??

 

 

 

New Member
Posts: 5
Registered: ‎10-29-2016

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

[ Edited ]

@fontaaaaaa wrote:

I've returned to 1.10.7. With this 1.10.8 the router (Edgerouter Lite) seems to lose his ipv6 every few days.

 

Edit: Problem also seems to be present in 1.10.7.


 

Did you find a release without the IPv6 problem? Had 1.9.x before and also had to deal with lost v6 addresses.

What's the name of your ISP? 

Emerging Member
Posts: 41
Registered: ‎04-18-2018
Kudos: 1

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

On a dual WAN configuration, the interface fails to return to an available/ready state when manually disabled/enabled.

New Member
Posts: 13
Registered: ‎08-26-2017
Kudos: 1

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

It seems IPsec IKEv2 Roadwarrior is broken?

 

I've an a few ER-4 running 1.10.6 without problems. Clients (MacOS, iOS, Win10 ) are connecting without problems. After Upgrade to 1.10.8 I get from swanctl --log:

 

11[IKE] no private key found for 'xxxxxxxx'

 

Private key is existend and valid, as it works with 1.10.6.

 

Any Ideas?

 AP-AC lite | AP-AC-Pro | AP-AC-nanoHD | AP-AC HD | USG 3P | EdgeRouter ER-4 | Edgerouter ER-6P
professional services ( MSP ) | Cloud hosted unifi controllers
New Member
Posts: 13
Registered: ‎08-26-2017
Kudos: 1

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

Update: It seems, that the Update wiped my certs keys etc. in /etc/ipsec.d/ - copied them from /config/.acme.sh/... and VPN IKEv2 works again.

 AP-AC lite | AP-AC-Pro | AP-AC-nanoHD | AP-AC HD | USG 3P | EdgeRouter ER-4 | Edgerouter ER-6P
professional services ( MSP ) | Cloud hosted unifi controllers
New Member
Posts: 5
Registered: ‎04-19-2017

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

After an update everything, expect /config/, will be wiped.

Because of this, it is a good idea to store your certs in "/config/auth"

 

Regards,

Tuffi

 

New Member
Posts: 8
Registered: 4 weeks ago

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

I have load balancing and "commit-confirm" problem.

 

[Reference]
EdgeRouter X Load Balancing and commit-confirm problem - Ubiquiti Networks Community
https://community.ubnt.com/t5/EdgeRouter/EdgeRouter-X-Load-Balancing-and-commit-confirm-problem/td-p...

 

New Member
Posts: 4
Registered: ‎01-23-2018

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

A minor double slash bug in /etc/squidguard/squidGuard.conf

 

 

#
# autogenerated by vyatta-update-webproxy.pl
#

dbhome //config/url-filtering/squidguard/db
logdir /var/log/squid

rewrite safesearch {
	s@(.*\.google\..*/(custom|search|images|groups|news)?.*q=.*)@\1\&safe=active@i
	s@(.*\..*/yandsearch?.*text=.*)@\1\&fyandex=1@i
	s@(.*\.yahoo\..*/search.*p=.*)@\1\&vm=r@i
	s@(.*\.live\..*/.*q=.*)@\1\&adlt=strict@i
	s@(.*\.msn\..*/.*q=.*)@\1\&adlt=strict@i
	s@(.*\.bing\..*/search.*q=.*)@\1\&adlt=strict@i
	log	rewrite.log
}

.....
New Member
Posts: 1
Registered: ‎08-23-2018

Re: EdgeMAX EdgeRouter software version v1.10.8 has been released!

I just noticed that none of my firewall policies are reporting stats for the rules after updating to 1.10.8.

Reply