Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Help] Connection problem to web interface #290

Closed
SolidRhino opened this issue Aug 14, 2024 · 14 comments
Closed

[Help] Connection problem to web interface #290

SolidRhino opened this issue Aug 14, 2024 · 14 comments
Assignees
Labels
help wanted Extra attention is needed more info required missing information

Comments

@SolidRhino
Copy link

When I set my password and test the connection to the web interface, I get the following error:

CleanShot 2024-08-14 at 20 31 16@2x

The password is correct so I don't know what the error is.

@ExtremeFiretop
Copy link
Owner

ExtremeFiretop commented Aug 14, 2024

When I set my password and test the connection to the web interface, I get the following error:

CleanShot 2024-08-14 at 20 31 16@2x

The password is correct so I don't know what the error is.

The error says it's unable to login to your local router "RT-AX86U_PRO-E9F0.lan" on port 80.
Do you have port 80 blocked for local login?

@ExtremeFiretop
Copy link
Owner

When I set my password and test the connection to the web interface, I get the following error:

CleanShot 2024-08-14 at 20 31 16@2x

The password is correct so I don't know what the error is.

For diagnostics purposes, can I ask you to send the results of the following commands (including enclosing curly bracket):

{
_shownvram_() { printf "$1=[%s]\n" "$(nvram get "$1")" ; }
_shownvram_ http_enable
_shownvram_ lan_domain
_shownvram_ lan_hostname
_shownvram_ http_lanport
_shownvram_ https_lanport
}

@ExtremeFiretop
Copy link
Owner

Don't forget you can hit the "Tab" key to view the password as you type it.

Also, make sure nothing else is logged into the WebUI while testing.

@SolidRhino
Copy link
Author

The password is correct and nothing else is logged in. When I run your command for dignostic I get the following response:


http_enable=[2]
lan_domain=[lan]
lan_hostname=[RT-AX86U_Pro-E9F0]
http_lanport=[80]
https_lanport=[8443]

@ExtremeFiretop
Copy link
Owner

The password is correct and nothing else is logged in. When I run your command for dignostic I get the following response:


http_enable=[2]
lan_domain=[lan]
lan_hostname=[RT-AX86U_Pro-E9F0]
http_lanport=[80]
https_lanport=[8443]

Sorry just to be completely clear, you had already mentioned in your first post the password is correct.
Can you confirm that you viewed the password with the TAB key?

Do you have "Enable Access Restrictions" on?

image

What authentication method is the router set too:

image

Can you test accessing the routers web UI with the URL below:

http://RT-AX86U_Pro-E9F0.lan

@ExtremeFiretop
Copy link
Owner

When I set my password and test the connection to the web interface, I get the following error:

CleanShot 2024-08-14 at 20 31 16@2x

The password is correct so I don't know what the error is.

@SolidRhino
This is what I get when I try with an invalid made up password:

image

It does not say it can't connect on port 80, it just says login failed, In your case it's telling me the router is actively refusing the connection on that URL I mentioned: http://RT-AX86U_Pro-E9F0.lan

@ExtremeFiretop ExtremeFiretop added possible bug? more info needed more info required missing information labels Aug 15, 2024
@SolidRhino
Copy link
Author

Do you have "Enable Access Restrictions" on?

image

Thank you so much for pointing this out! This option had to be changed.

@ExtremeFiretop ExtremeFiretop added help wanted Extra attention is needed and removed help wanted Extra attention is needed possible bug? more info needed labels Aug 15, 2024
@ExtremeFiretop
Copy link
Owner

Do you have "Enable Access Restrictions" on?
image

Thank you so much for pointing this out! This option had to be changed.

Happy to help, I figured something had to be blocking port 80, it was just a matter of finding what.
Enjoy automated updates!

@ExtremeFiretop
Copy link
Owner

@Martinski4GitHub

We can detect the use of the access restrictions using this NVRAM value:

enable_acc_restriction=0 (disabled)

or

enable_acc_restriction=1 (enabled)

This was referenced Aug 16, 2024
@SolidRhino
Copy link
Author

I have added the router to the allowed list. Then it works.

@ExtremeFiretop
Copy link
Owner

ExtremeFiretop commented Aug 16, 2024

I have added the router to the allowed list. Then it works.

I am considering blocking entering a password if access restrictions is on with WebUI access restricted. If it's SSH restrictions only, then it won't block.

However, with this design you wouldn't be able to have access restrictions on for the WebUI and it would need to be limited to SSH only.

Would you prefer instructions detailing how to add the routers IP? Or just asking the user to disable WebUI access restrictions to continue?

Is there a reason you require the web access restrictions? Maybe this will help me understand why you would opt to add the routers IP address instead of disabling.

@SolidRhino
Copy link
Author

I want to enable web access restrictions so that only I can connect to the router ssh and webinterface on the lan. So I think informatie is better than complete blocking the setup.

Isn't it possible to use localhost to communicate with the webui?

@ExtremeFiretop
Copy link
Owner

ExtremeFiretop commented Aug 16, 2024

Isn't it possible to use localhost to communicate with the webui?

I'm not sure I'm following, can you clarify this question?

As for the solution, me and Martinski have come to an agreed upon method to detect and advise of this setup.
The PR is currently open and pending approval. #292

Thanks!

@ExtremeFiretop
Copy link
Owner

I want to enable web access restrictions so that only I can connect to the router ssh and webinterface on the lan. So I think informatie is better than complete blocking the setup.

Isn't it possible to use localhost to communicate with the webui?

Can you confirm that: nvram get lan_ipaddr

Is the IP you added to the rule? you don't need to share the IP, just confirm or deny that returns the IP you added. Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Extra attention is needed more info required missing information
Projects
None yet
Development

No branches or pull requests

3 participants