{"id":16527517,"url":"https://github.com/intellicode/edgerouter-lite-xs4all","last_synced_at":"2026-03-04T22:31:36.513Z","repository":{"id":66194793,"uuid":"75507159","full_name":"Intellicode/edgerouter-lite-xs4all","owner":"Intellicode","description":null,"archived":false,"fork":false,"pushed_at":"2016-12-03T23:55:10.000Z","size":1,"stargazers_count":0,"open_issues_count":0,"forks_count":2,"subscribers_count":3,"default_branch":"master","last_synced_at":"2025-01-13T16:24:05.270Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Intellicode.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2016-12-03T23:48:08.000Z","updated_at":"2016-12-03T23:55:31.000Z","dependencies_parsed_at":null,"dependency_job_id":"35ac7a2a-f166-41e8-8f38-b19cc4c1bdb6","html_url":"https://github.com/Intellicode/edgerouter-lite-xs4all","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Intellicode%2Fedgerouter-lite-xs4all","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Intellicode%2Fedgerouter-lite-xs4all/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Intellicode%2Fedgerouter-lite-xs4all/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Intellicode%2Fedgerouter-lite-xs4all/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Intellicode","download_url":"https://codeload.github.com/Intellicode/edgerouter-lite-xs4all/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":241610990,"owners_count":19990508,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-11T17:35:47.169Z","updated_at":"2026-03-04T22:31:36.458Z","avatar_url":"https://github.com/Intellicode.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# edgerouter-lite-config\n\nSee https://kriegsman.io/2016/01/configuring-a-ubiquiti-edgerouter-lite-for-kpn/\n\nStep 1: \nConfigure ethernet to 192.168.1.2/24 with gateway 192.168.1.1\n\n```\nconfigure\n \nset interfaces ethernet eth1 address 192.168.2.254/24\nset interfaces ethernet eth1 description \"eth1 - LAN\"\nset interfaces ethernet eth1 duplex auto\nset interfaces ethernet eth1 speed auto\n \nset service dhcp-server disabled false\nset service dhcp-server hostfile-update disable\nset service dhcp-server shared-network-name LAN authoritative enable\nset service dhcp-server shared-network-name LAN subnet 192.168.2.0/24\nset service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 default-router 192.168.2.254\nset service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 dns-server 8.8.8.8\nset service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 dns-server 8.8.4.4\nset service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 lease 86400\nset service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 start 192.168.2.50\nset service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 start 192.168.2.50 stop 192.168.2.200\n \nset service dns forwarding cache-size 150\nset service dns forwarding listen-on eth1\nset service dns forwarding name-server 8.8.8.8\nset service dns forwarding name-server 8.8.4.4\nset service dns forwarding options listen-address=192.168.2.254\n \ncommit\nsave\nexit\n```\n\nStep 2:\n```\nconfigure\n \nset firewall all-ping enable\nset firewall broadcast-ping disable\nset firewall ipv6-receive-redirects disable\nset firewall ipv6-src-route disable\nset firewall ip-src-route disable\nset firewall log-martians enable\nset firewall receive-redirects disable\nset firewall send-redirects enable\nset firewall source-validation disable\nset firewall syn-cookies enable\n \nset firewall name WAN_IN default-action drop\nset firewall name WAN_IN description \"WAN to Internal\"\nset firewall name WAN_IN enable-default-log\nset firewall name WAN_IN rule 10 action accept\nset firewall name WAN_IN rule 10 description \"Allow established/related\"\nset firewall name WAN_IN rule 10 log enable\nset firewall name WAN_IN rule 10 protocol all\nset firewall name WAN_IN rule 10 state established enable\nset firewall name WAN_IN rule 10 state invalid disable\nset firewall name WAN_IN rule 10 state new disable\nset firewall name WAN_IN rule 10 state related enable\n \nset firewall name WAN_IN rule 20 action drop\nset firewall name WAN_IN rule 20 description \"Drop invalid state\"\nset firewall name WAN_IN rule 20 log enable\nset firewall name WAN_IN rule 20 protocol all\nset firewall name WAN_IN rule 20 state established disable\nset firewall name WAN_IN rule 20 state invalid enable\nset firewall name WAN_IN rule 20 state new disable\nset firewall name WAN_IN rule 20 state related disable\n \nset firewall name WAN_LOCAL default-action drop\nset firewall name WAN_LOCAL description \"WAN to router\"\nset firewall name WAN_LOCAL enable-default-log\nset firewall name WAN_LOCAL rule 10 action accept\nset firewall name WAN_LOCAL rule 10 description \"Allow established/related\"\nset firewall name WAN_LOCAL rule 10 log disable\nset firewall name WAN_LOCAL rule 10 protocol all\nset firewall name WAN_LOCAL rule 10 state established enable\nset firewall name WAN_LOCAL rule 10 state invalid disable\nset firewall name WAN_LOCAL rule 10 state new disable\nset firewall name WAN_LOCAL rule 10 state related enable\n \nset firewall name WAN_LOCAL rule 20 action drop\nset firewall name WAN_LOCAL rule 20 description \"Drop invalid state\"\nset firewall name WAN_LOCAL rule 20 log disable\nset firewall name WAN_LOCAL rule 20 protocol all\nset firewall name WAN_LOCAL rule 20 state established disable\nset firewall name WAN_LOCAL rule 20 state invalid enable\nset firewall name WAN_LOCAL rule 20 state new disable\nset firewall name WAN_LOCAL rule 20 state related disable\n \ncommit\nsave\nexit\n```\nStep 3:\n```\nconfigure\n \ndelete interfaces ethernet eth0 address\n \nset interfaces ethernet eth0 description \"eth0 - FTTH\"\nset interfaces ethernet eth0 duplex auto\nset interfaces ethernet eth0 speed auto\nset interfaces ethernet eth0 mtu 1512\n \nset interfaces ethernet eth0 vif 6 description \"eth0.6 - Internet\"\nset interfaces ethernet eth0 vif 6 mtu 1508\n \nset interfaces ethernet eth0 vif 6 pppoe 0 user-id FB7490@xs4all.nl\nset interfaces ethernet eth0 vif 6 pppoe 0 password xs4all\nset interfaces ethernet eth0 vif 6 pppoe 0 default-route auto\nset interfaces ethernet eth0 vif 6 pppoe 0 name-server auto\nset interfaces ethernet eth0 vif 6 pppoe 0 idle-timeout 180\nset interfaces ethernet eth0 vif 6 pppoe 0 mtu 1500\n \nset interfaces ethernet eth0 vif 6 pppoe 0 firewall in name WAN_IN\nset interfaces ethernet eth0 vif 6 pppoe 0 firewall local name WAN_LOCAL\n \nset system name-server 8.8.8.8\nset system name-server 8.8.4.4\n \ncommit\nsave\nexit\n```\nStep 4: \nMake sure to update to a version that supports this\n```\nconfigure\n \nset system offload ipv4 forwarding enable\nset system offload ipv4 pppoe enable\nset system offload ipv4 vlan enable\n \ncommit\nsave\nexit\n```\n\nStep 5: \n\n```\nconfigure\n \nset service nat rule 5010 description \"KPN Internet\"\nset service nat rule 5010 log enable\nset service nat rule 5010 outbound-interface pppoe0\nset service nat rule 5010 protocol all\nset service nat rule 5010 source address 192.168.2.0/24\nset service nat rule 5010 type masquerade\n \ncommit\nsave\nexit\n```\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fintellicode%2Fedgerouter-lite-xs4all","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fintellicode%2Fedgerouter-lite-xs4all","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fintellicode%2Fedgerouter-lite-xs4all/lists"}