FELIXXRT
日本語English

Status and maintenance

This page covers the status pages and maintenance tasks such as backup, updates and reboot. For the configuration history and restoring an earlier configuration, see Applying changes.

Dashboard

The Dashboard is shown after you sign in. The widget layout is saved per user.

Widget Content
WAN Connection status (Connected / Not connected), IPv4 address and whether IPv6 works
STATUS Number of devices and VPN connections
SYSTEM CPU, memory and temperature (temperature only where the hardware reports it)
TRAFFIC Traffic graph of the selected interface (1 min / 5 min / 15 min)
INTERFACES Link status, speed and current RX/TX per interface
MAP-E PORTS Ports in use with MAP-E
EVENTS Recent events (warnings only by default)

To change the layout:

  1. Press Edit.
  2. Add widgets with + Add widget and adjust each one with Smaller, Larger and Remove. For TRAFFIC and EVENTS you can also select the interface or which events to show.
  3. Press Done.

To return to the original layout, press Reset layout while editing.

Self-check

Every minute the router checks itself. If a service FELIXXRT uses (DHCP/DNS, VPN, …) has stopped, it is restarted. Problems that cannot be fixed this way — a service that does not start, a disk 90% full or more, a firewall that is not loaded — are shown at the top of the dashboard.

Devices

The Devices page lists DHCP leases and devices the router has recently talked to. It refreshes every 10 seconds.

Status Meaning
Active The device is communicating now.
Recently active The device communicated a short while ago.
Lease only (no response) There is a DHCP lease but the device does not respond.
Blocked Traffic from this device is blocked.

The buttons in each row do the following (each requires edit permission for the related feature):

Button Action
Make static Always give this device the same address. Enter a name and an IP address (outside the DHCP address range) and press Save.
Wake on LAN Sends a Wake-on-LAN packet to power on the device. It is sent immediately.
Block Stops traffic from this device to the internet and other LANs. DHCP and DNS remain available. Unblock removes the block.

Make static and Block become pending changes. Apply them from Review changes at the top of the page and Confirm within 5 minutes. A block is stored as an extra firewall rule whose name starts with block-client-.

Traffic

MONITOR › Traffic shows RX and TX graphs per interface. Choose 1, 5 or 15 minutes under Range. Each graph also shows the peak.

Logs

MONITOR › Logs shows the logs of the last 7 days. Logs are recorded in English.

  1. Select the source (All, FELIXXRT, Network, Firewall, DHCP/DNS, Time sync).
  2. Select the severity (All severities, Warning and above, Errors only).
  3. Optionally enter a Keyword and press Search.

Up to 1000 entries are shown, newest first. Sign-ins to the web interface, applied changes and started updates are also recorded here.

Diagnostics

MONITOR › Diagnostics runs tests from the router. Select a Tool and press Run.

Tool What it does
Ping Sends 4 pings to the target and checks the replies.
Traceroute Shows the path to the target (up to 20 hops).
DNS lookup Resolves a name. Record type is A, AAAA, PTR, MX or TXT. If DNS server (optional) is empty, the router itself is queried.
Packet capture Records traffic on the selected interface and saves it as a pcap file, which you can open in e.g. Wireshark.
Field Description
Target IP address or name, e.g. 1.1.1.1
Outgoing interface Interface Ping and Traceroute send from. Auto follows the routing table.
Interface Interface recorded by the packet capture.
Duration (1–60 s) How long the packet capture runs.
Filter (optional) Which packets to record, in tcpdump syntax, e.g. port 53. Leave empty to record all. Up to 1000 packets.

Support information

Administrators can save a file with the router state, configuration and logs with Download under Support information on the Diagnostics page. Send it when asking for support. Secrets such as passwords and keys are not included. On the CLI, show tech-support shows the same.

General (hostname, time, power)

On SYSTEM › General you can:

  • Change the Hostname, Time zone and Admin interface names. Save creates a pending change. For admin interface names, see Logging in to the web UI.
  • Check the FELIXXRT and OS versions, kernel, uptime, current time and time synchronization under System information. If the time is Not synchronized, log times and certificate checks may be off.
  • Download the certificate of the router's CA with Download CA certificate.
  • Restart or shut down the router with Reboot or Power off under Power.

Rebooting stops traffic for about a minute. After Power off, the router can only be started with its power button. Be careful when working remotely.

Power off is not available while a change is awaiting confirmation. Confirm or Revert it first.

Backup and restore

Use SYSTEM › Backup.

Backup

Administrators can save a full backup: the configuration, admin users, VPN users, certificates and secrets (passwords, keys). Use it to reinstall or to move to another machine.

  1. Enter Password and Confirm password (8 characters or more). The file is encrypted with this password.
  2. Press Download. felixxrt-<hostname>-<date>.felixxrt-backup is saved.

Without the password this backup cannot be restored.

Other users can save only the configuration file (.yaml), without admin users, VPN users or secrets.

Restore

  1. Under Restore, select the file. For a full backup, enter the password used when it was saved.
  2. Press Load.
    • For a full backup, admin users, VPN users, certificates and secrets are replaced at once and the web interface restarts. Log in again (passwords are those at the time of the backup). The previous state is kept on the router.
  3. The configuration becomes pending changes. Check it with Review changes at the top, apply it and Confirm within 5 minutes. When restoring onto another machine, check the interface assignment before applying.

Updates

SYSTEM › Updates updates FELIXXRT and the Debian packages. FELIXXRT comes from the signed FELIXXRT apt repository; its signature is verified before use.

  1. Press Check for updates to refresh the package lists. Last checked shows when the lists were last refreshed.
  2. Available updates lists the installed and available versions.
  3. Press one of:
    • Update FELIXXRT: updates FELIXXRT only. The web interface is unavailable for a few seconds; routing continues.
    • Update all: updates all packages. Depending on the packages, traffic may stop briefly.
  4. Progress is shown under Updating…. Afterwards, check Last update log.
  5. If A reboot is required to complete the update appears, reboot from SYSTEM › General.

Before each update, the settings, admin users, VPN data, certificates and so on are backed up automatically. These backups are kept on the router; the newest 5 are retained.

Packages are never updated automatically. Updates are only installed from this page.

Roll back

Before each update, the router keeps the package of the installed version and a copy of its settings. If an update causes problems, Roll back next to Previous version (administrators only) returns to the state before the update, even without network access.

Rolling back loses settings and users changed after the update.

Update channel

“Update channel” chooses which versions you receive. Like other settings, save it, then apply and confirm.

Channel Receives
Stable (default) Released versions only
Testing Pre-release versions too (for evaluation). Switching back to stable does not downgrade what is installed

When something goes wrong

  • If “Warnings while fetching the lists” appears after “Check for updates”, some sources could not be fetched. Use “Diagnostics” to check that the router reaches the internet and resolves names.
  • If “The new version could not apply the configuration” appears, the update is installed but the previous configuration keeps running. Fix the problem shown (for example a port that MAP-E does not allow) and apply the configuration again.

Using the CLI →