Ubiquiti ERX - IoT

• Requirements
  • Isolate IoT devices (DVR, Tivo, printer)
  • Isolate Guests (phones, tablets)
  • Allow "Media Devices" access to Media Server even if a Guest or IoT device
  • Cannot depend on vlan tagging (i.e. support using dumb WAP)

• Router Setup
  • Wizard WAN-2LAN2
    • Lan1: 192.168.x.y
    • Lan2: 192.168.z.w
  • Command Line configuration
    • Connect to CLI
      ssh [ubnt]@[router ip]
    • #configure
      • Clone MAC
        set interfaces ethernet eth0 mac 01:02:03:A1:A2:A3
      • local hostfile update
        set service dhcp-server hostfile-update enable
    • #commit;save;exit
  • Static DHCP Leases
    • Lan1
      • Orb - 11
      • dvr01 - 19
      • tivo - 18
      • tivo02 - 22
  • Port Forwards
    • Lan1
      • wormhole
      • ERX
      • dvr01
      • dvr02
      • owncloud
      • subsonic
      • plex
      • sab
      • letsencrypt