FELIXXRT
日本語English

Troubleshooting

Common problems and what to do about them.

Locked out of the web UI after a change

An applied change is reverted automatically unless you press Confirm within 5 minutes.

  1. Wait 5 minutes.
  2. Open the web UI again at the old address (if you changed the LAN address, renew the address on your device as well).

If the router restarts while waiting for confirmation, it reverts at startup once the deadline has passed.

If you already confirmed the change, fix it with the CLI on the console.

admin@felixxrt> show history
admin@felixxrt> rollback 12
Rolled back to revision 12. Confirm within 5 minutes with: confirm
admin@felixxrt> confirm

rollback restores the revision with the number shown by show history. It also needs confirm within 5 minutes.

Cannot open the web UI

Connect a screen and keyboard to the router and check the following in order.

  1. The first console screen shows the LAN address and Web interface: https://…/. Make sure you open that address with https://.
  2. Log in and run show interfaces to see the LAN address and whether LINK is up.
  3. Run show hardware to see whether the NIC with the cable has LINK up. If the LAN is on the wrong NIC, choose it again with request interfaces assign.
  4. To change the LAN address, use request lan-address (the DHCP address range moves too).
  5. If nothing helps, return to the default configuration with request factory-default. Admin users are kept.

Commands starting with request are reverted unless you confirm within 5 minutes. See First setup for details.

Other possible causes:

Symptom Cause and fix
"The admin interface is not available on this interface" You opened the web UI on an interface where it is not allowed. Open it from the LAN, or select Web UI under Allowed services for that zone (Firewall and port forwarding)
The name (such as felixxrt.home.arpa) does not open The device does not use the router as its DNS server. Use the address instead
Certificate warning The certificate is issued by the router's own CA. Install the CA certificate on the device to stop the warning (Logging in to the web UI)
"Too many failed login attempts. Try again in n minutes" 5 failures from the same source within 15 minutes. Wait for the time shown
You can log in, but the menu has few pages Pages your role cannot view are hidden. Ask an administrator to check your role

Forgot an administrator password

Ask another administrator to set a new password.

  1. The other administrator opens SYSTEM › Admin users.
  2. Selects the row of the user.
  3. Enters a new password in Password and presses Save.

If the authenticator app is lost and no two-factor code can be produced, the administrator can use Reset two-factor on the same screen. The user then logs in and sets it up again.

If no administrator can log in

If no administrator can log in, there is no way to reset a password from the console, and the router has no Linux shell. The only way out is to reinstall, which erases the whole disk.

After reinstalling, restore things in this order:

  1. Reinstall and create the first administrator as in Installation and First setup.
  2. In SYSTEM › Backup, restore the full backup you saved. Admin users, VPN users, certificates and secrets come back too, so VPN devices keep working with their current configuration.
  3. Apply and confirm the configuration.

If you only have a configuration file (.yaml), recreate admin users, VPN users and secrets, and hand out new configurations to VPN devices.

To avoid this, keep at least two administrators and keep a full backup (Status and maintenance).

Cannot apply a change

Message What to do
"The previous change (revision n) has not been confirmed" The previous change awaits confirmation. Press Confirm or Revert at the top, then apply
"Cannot apply because of the following problems:" Fix the settings at the places listed
The pre-check shows ✗ A service rejected the generated configuration file. Read the message and fix the settings
"You do not have permission to apply changes" Your role cannot apply. Ask a user with permission to apply them

No Internet connection

  1. On the Dashboard, check the WAN status and address.
  2. In MONITOR › Diagnostics, check whether a ping from the router reaches the outside.
  3. Check that the WAN method and values match what your provider tells you (WAN (Internet connection)).

The installer starts when the USB stick is left in

On PCs that boot with BIOS, the USB menu still defaults to installing. Choose Boot from the disk within 5 seconds, or remove the USB stick. Even if the installer starts, nothing is erased unless you choose Yes at the erase confirmation (Installation).

Problems after an update

Roll back on SYSTEM › Updates returns to the version and settings before the update (Status and maintenance). When asking for support, save Support information on the Diagnostics page and send it.