The ERLite 3 router is old by today’s standard, and Ubiquiti has mostly dropped their support for EdgeOS.

However, EdgeOS shares a common ancestry with VyOS, Vyatta, and the configuration is similar to Juniper and Palo Alto Networks configuration.

The platforms themselves are still fairly performant and the ERLite-3 can handle around 1Gb/s of network traffic. You can also still access the Linux sub-system so the platform is still extensible through that.

Below is the reference configurtion for the Ubiquiti ER-Lite3 Router running EdgeOS.

firewall {
    all-ping enable
    broadcast-ping disable
    ipv6-receive-redirects disable
    ipv6-src-route disable
    ip-src-route disable
    log-martians enable
    name Outside-In {
        default-action drop
        rule 1 {
            action accept
            protocol all
            state {
                established enable
                related enable
            }
        }
        rule 2 {
            action drop
            protocol all
            state {
                invalid enable
            }
        }
    }
    name Outside-Local {
        default-action drop
        rule 1 {
            action accept
            protocol all
            state {
                established enable
                related enable
            }
        }
        rule 2 {
            action drop
            protocol all
            state {
                invalid enable
            }
        }
        rule 5 {
            action accept
            icmp {
                type 8
            }
            protocol icmp
        }
    }
    receive-redirects disable
    send-redirects enable
    source-validation disable
    syn-cookies enable
}
interfaces {
    bridge br0 {
        address 192.168.0.1/24
        aging 300
        bridged-conntrack disable
        hello-time 2
        max-age 20
        priority 0
        promiscuous disable
        stp false
    }
    ethernet eth0 {
        firewall {
            in {
                name Outside-In
            }
            local {
                name Outside-Local
            }

        }
        address dhcp
        duplex auto
        speed auto
    }
    ethernet eth1 {
        bridge-group {
            bridge br0
        }
        duplex auto
        speed auto
    }
    ethernet eth2 {
        bridge-group {
            bridge br0
        }
        duplex auto
        speed auto
    }
    loopback lo {
    }
}
protocols {
}
service {
    dhcp-server {
        disabled false
        hostfile-update disable
        shared-network-name LAN {
            authoritative disable
            subnet 192.168.0.0/24 {
                default-router 192.168.0.1
                dns-server 1.1.1.1
                dns-server 1.0.0.1
                domain-name lab.davissystem.net
                lease 86400
                start 192.168.0.50 {
                    stop 192.168.0.250
                }
            }
        }
        static-arp disable
        use-dnsmasq disable
    }
    gui {
        http-port 80
        https-port 443
        listen-address 0.0.0.0
        older-ciphers enable
    }
    nat {
        rule 9999 {
            outbound-interface eth0
            protocol all
            type masquerade
        }
    }
    ssh {
        port 22
        protocol-version v2
    }
    unms {
    }
}
system {
    analytics-handler {
        send-analytics-report false
    }
    crash-handler {
        send-crash-report false
    }
    host-name DavisSystem-UBNT1
    login {
        user ubnt {
            authentication {
                plaintext-password "ubnt"
            }
            level admin
        }
    }
    name-server 1.1.1.1
    name-server 1.0.0.1
    ntp {
        server 0.us.pool.ntp.org {
        }
        server 1.us.pool.ntp.org {
        }
        server 2.us.pool.ntp.org {
        }
        server 3.us.pool.ntp.org {
        }
        server us.pool.ntp.org {
        }
    }
    offload {
        hwnat disable
        ipsec enable
        ipv4 {
            bonding enable
            forwarding enable
            gre enable
            pppoe enable
            vlan enable
        }
        ipv6 {
            bonding enable
            forwarding enable
            vlan enable
        }
    }
    syslog {
        global {
            facility all {
                level notice
            }
            facility protocols {
                level debug
            }
        }
    }
    time-zone America/Los_Angeles
}