UDM Pro + EdgeRouter 6p

[Your PCMD]

Trying to figure out if this is possible.

I have a UDM Pro plus 24 port POE Pro that runs my shop's network, I have a static IP. I also have an ER p6 that I want to use to set up UNMS and run a small WISP. Problem is, I only have a single fiber line 500/500. That's not the issue, the issue is, how would one set up to use both the UDM and ER on a single internet line?

I've created a subnet in UDM and have it set for a single specific port (24) on the switch of 172.16.xx.1/24. I presume that if I connect the ER to this port, it would receive an IP in said subnet range (after I config the static IP of the ER to 172.16.xx.2, from there the ER would connect to a airMAX Rocket Prism then DHCP to the airMAX GigaBeam and airMAX NanoStation.

Is this possible? I don't want to have to get another fiber line dropped in. I know I can have another static IP added, but if I do that, how do I split the connection? Note that the fiber line ends at an RJ45 in the wall.

 

[YeOldeStonecat]

I would not try to run it on a single line.
At our office, we've always had a full block of pubby IPs. We run our Untangle gateway at the usual .1 for our network....with several public IP's aliased to it, and additional internal interfaces running different networks for our office (we resell internet in our building to other businesses that rent office suites here).

...and then...we have an Edge Router Pro 8....taking the last public IP, and for our network it's a .254 gateway. Only a few services ran out of that...our mail filtering server (SpamTitan..no longer...retired that), certain N-Central RMM traffic (no longer, retired that), and a couple of other services. RDS.

It's...possible to do something like you state above, but...I hate...hate...hate...double NAT, and refuse to do it for most circumstances.
If you're going to WISP, I'd get another public IP...or...even a second, dedicated connection. I'd want to separate my office traffic from bandwidth that I resell.

Re: splitting the connection. Well, you can put a switch 'tween your two routers and the fiber ETH handoff. But...I'd rather get a good, capable firewall at the edge, like Untangle or PFSense, that can handle multiple public IP aliases...and separate traffic to/from each to different internal ETH ports.

 

[Your PCMD]

Re: splitting the connection. Well, you can put a switch 'tween your two routers and the fiber ETH handoff.

Well, I have 2 static IP addresses on the same line now coming into my shop. So you're saying I could have an unmanaged switch (5 port) at the wall, connect the ETH from wall to say port 1, then port 2 to the UDMP as it already stands, and then port 3 to the ER p6 and set that up using the 2nd static IP?

 

[YeOldeStonecat]

I have seen that approach done, yes.
Just have a good switch there.

 

[Markverhyden]

Well, I have 2 static IP addresses on the same line now coming into my shop. So you're saying I could have an unmanaged switch (5 port) at the wall, connect the ETH from wall to say port 1, then port 2 to the UDMP as it already stands, and then port 3 to the ER p6 and set that up using the 2nd static IP?

View attachment 13127

I see that being done all the time if the ISP device doesn't switch ports. And you want to make sure you have a backup switch as well.