First setup
On the first start after installation, you create the first administrator on the router's own screen (the console). The network starts with the default configuration, so in most cases you can open the web UI right away.
1. Wait for the start
On the first start after installation, the router creates and applies the default configuration. Meanwhile the screen shows "Starting FELIXXRT..." (up to about 2 minutes).
Then the name, version, addresses and the URL of the web UI appear.
FELIXXRT x.y.z — felixxrt
WAN wan0 198.51.100.23/24 2001:db8:1234:5600::1/64
LAN lan0 192.168.1.1/24
Web interface: https://192.168.1.1/ (from the LAN)
The console is in English only.
2. Create the first administrator
While there is no administrator, the console continues with creating one. This administrator is used for the web UI, SSH and the console.
No administrator yet. Create the first one (it is used for the web interface, SSH and this console).
Administrator name [admin]:
Password:
Password again:
Created admin. Log in with it.
- Enter a name. Press Enter without typing anything to use
admin. - Enter the password twice.
| Field | Rules |
|---|---|
| Name | Lowercase letters, digits, _ and -, up to 32 characters (starting with a lowercase letter or _) |
| Password | At least 10 characters. No spaces at the start or end. Must not contain the name (when the name has 3 or more characters) |
3. Log in
Next the login prompt appears. Log in with the name and password you created to use the router CLI. Once two-factor authentication is set up, the code is asked as well.
login: admin
Password:
FELIXXRT x.y.z — felixxrt
Type ? or help for commands.
admin@felixxrt>
Type exit to log out. After 5 failed attempts in a row, logging in is blocked for a while.
Default configuration
| Item | Default |
|---|---|
| Hostname | felixxrt |
| WAN | The first NIC in name order (named wan0). IPv4 by DHCP, IPv6 by IPoE (RA and DHCPv6-PD) |
| LAN | The second NIC in name order (named lan0). 192.168.1.1/24. Hands out a /64 from the IPv6 prefix received on the WAN |
| DHCP | 192.168.1.100–192.168.1.199, lease time 12 hours |
| DNS | Upstream DNS servers received on the WAN, local domain home.arpa |
| Firewall | Everything from the WAN is dropped. From the LAN, traffic to the router and to the Internet is accepted. Masquerade on the WAN |
With a single NIC, it becomes the LAN (no WAN, no IPv6). NIC names are pinned to the MAC address, so they do not change after a reboot.
Useful commands
Once you can open the web UI from the LAN, everything else can be done there. If you cannot, or if you want to change which NIC is WAN or LAN, use the CLI on the console.
| Command | What it does |
|---|---|
show hardware |
List the NICs (name, MAC address, link state, speed, driver) |
show interfaces |
Addresses and state of WAN and LAN |
request interfaces assign <WAN NIC> <LAN NIC> |
Choose the NICs for WAN and LAN, by name or MAC address. Use none for no WAN |
request lan-address <address/prefix> |
Change the LAN address. The DHCP address range moves to the new network too |
request factory-default |
Replace the whole configuration with the default |
confirm |
Confirm the applied change |
Commands starting with request are applied immediately. Unless you run confirm within 5 minutes, they are reverted automatically. If there are pending changes, you are asked whether to discard them first.
Example: choose the WAN and LAN NICs
admin@felixxrt> show hardware
NIC MAC LINK SPEED DRIVER
enp3s0 00:00:5e:00:53:03 up 1000M igc
wan0 00:00:5e:00:53:01 down - igc
lan0 00:00:5e:00:53:02 up 1000M igc
admin@felixxrt> request interfaces assign enp3s0 lan0
Applied. Type confirm within 5 minutes to keep it; otherwise it is reverted automatically.
admin@felixxrt> confirm
Confirmed.
LINK up means a cable is connected. If you do not know which port is which NIC, plug the cables in one at a time and check with show hardware.
The chosen NICs are named wan0 and lan0. If that name is still held by the previous NIC (for example when moving the WAN to another NIC, as above), the renaming happens at the next start. Run confirm, then reboot, and the router comes up with the new assignment.
Example: change the LAN address
admin@felixxrt> request lan-address 192.168.50.1/24
Applied. Type confirm within 5 minutes to keep it; otherwise it is reverted automatically.
Here the DHCP address range becomes 192.168.50.100–192.168.50.199. Renew the address on a LAN device, check that https://192.168.50.1/ opens, then run confirm (or press Confirm in the web UI).
Back to the default configuration
request factory-default rebuilds the default configuration for the NICs that are present now. The hostname is kept. Admin users and their passwords do not change.
admin@felixxrt> request factory-default
Replace the whole configuration with the default (WAN = DHCP, LAN = 192.168.1.1/24)? Type yes: yes
Applied. Type confirm within 5 minutes to keep it; otherwise it is reverted automatically.