Question

Hi,

I am currently having issues accesing the web interface of the RUT950 via HTTPs. This had never been a problem before so I doubt this option was "suddenly" disabled. Please note the following:

• My computer is still able to access the internet.
• The router is responding to the ping
• I am able to access the router via SSH(!)
• I am entering in different web browsers (Chrome and Internet Explorer) the right IP of the router in the usual way I used to: https://XX.XX.XX.XX
•  I accesed this WUI many times before.
• No changes in the configuration of the router have been applied lately.
• The router is connected via LTE to the internet.

Could you please guide me through the troubleshooting of this issue? Since the router is installed in a remote area it is not easy to access the LAN directly.

Comments

Hello,

Could you provide some additional information? What does your browsers say, when you try to connect to the router? it does not connect at all or shows security risk warning? And have you tried accessing router through different IP, or rebooting router through SSH or SMS commands?

Also you can try enabling HTTP access with SMS command for short time and check if it works, it would let you to check remote access settings on router through WebUI if HTTP access works.

---

I have the same problem. permanently!

I have about 50 pcs. RUT955 routers in use. The devices are in use all over the country and I have my own APN at the providers LTE network. I can access all the devices through this VPN network. Every device has the same configuration. The web access (https) and the ssh access are enabled. The ssh connection can be established every time, BUT the web interface only works in the first few days. After some days the interface is not accessible.

When I enter the URL in the Browser (Chrome, Firefox, Edge), at first I get the page with the (standard-)information that the certificate is not valid (NET::ERR_CERT_AUTHORITY_INVALID). When I click the continue button the browser is loading, loading, loading, ....  I get no UI.

When I log in to the router via ssh and reboot the web server (/etc/init.d/uhttpd stop and /etc/init.d/uhttpd start) the web interface starts working. With this bug the web interface is unusable.

Any Idea what I can do? Is there a possibility to restart the web server every day (workaround)?

---

Hello VCnetwork,

Couple of questions. What firmware is in all of your devices? Second is there any process/function that runs on 80th port that could influence accessibility? Have you tried restoring to factory settings or flashing firmware and then reconfiguring at least one of the routers and problem still persisted?

 And for now you can try setting WebUI access port to something else than 80 (e.g. 88 or 8000) if it does not help try adding periodic reboot to yours router, (so it restarts itself every couple of days in least busy time) for time being.

We are looking into this problem with R&D, and it would still help if you could answer questions above, and any other additional information, or even if you could send me troubleshoot file from router that currently is experiencing the problem, through PM.

Best regards,
VidasKac

Answer 1

Thanks for your answer.

The browser shows basically a time-out. I checked with Netstat while making the HTTPs request and didn´t see any connection being established with the router.

I haven´t tried accessing the router with another IP as changing it might imply loosing the internet connection with the other devices, which is critical. I rebootet the router via SSH but the problem was still there. I got the status via SMS without an issue though.

How can I enable (and disable) HTTP access with a SMS command? And can you also tell me the corresponding command via SSH? Thanks!

Comments

Thanks for yours patience. 

I didn't mean changing IP of yours router, another device with another IP (like PC with different internet connection or smartphone with mobile connection) because it is possible, however unlikely if everything was working fine before, that yours IP was blocked if you tried to connect too many times or made a mistake entering password few times, depending on yours configuration, from same IP.

SMS command for enabling HTTP access would be <password> Enable remote HTTP access 

for SSH you would have to manually navigate to config file and change HTTP access status from 0 to 1.

type in:
cd /etc/config
vi uhttpd  (press "I", find line that says option _httpWanAccess '0'   , change 0 to 1, then press ESC and type in :wq and hit Enter)

Regards,
VidasKac

 

---

Hello,

I'm having a similar issue. Can't reach the UI with a browser, can SSH into the box. Restart does not fix it. The box is currently onsite on an APN. Not sure if I will loose the device if I firstboot ? Deleting the logs and restarting didn't work for me! 

Tried deleting and restarting the eventslog - nothing.

I do not have http_WAN option in my httpd config file. 

Is there a way to begin restarting services to see if I can make the webserver come back on? 

Thanks. 

Answer 2

I have a similar issue here on one device. The webui of the modem is no more accessible (browser timeout). Rebooting the modem (or power cycling) does not change anything.

I discovered that the web interface is accessible only from the device itself, and so I found a walkaround using an ssh tunnel…

That means the issue a firewall based (or on the listening interface).

 

<!--[if gte mso 9]> <![endif]--><!--[if gte mso 9]> Normal 0 21 false false false FR X-NONE X-NONE <![endif]--><!--[if gte mso 9]> <![endif]--><!--[if gte mso 10]> /* Style Definitions */ table.MsoNormalTable {mso-style-name:"Tableau Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-parent:""; mso-padding-alt:0cm 5.4pt 0cm 5.4pt; mso-para-margin-top:0cm; mso-para-margin-right:0cm; mso-para-margin-bottom:8.0pt; mso-para-margin-left:0cm; line-height:107%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri",sans-serif; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi; mso-fareast-language:EN-US;} <![endif]-->

Comments

I confirm this approach - that was also successful in my case. However I could not find out what actually was the reason for the WEB UI being locked out for logins from LAN. A reset to factory settings via the Administration menue fixed the issue. Here are the detailed instructions:

1) Being connected to RUT955 first create a ssh tunnel by typing this command in the terminal of the computer that you are using to connect to your Teltonica router: "ssh -L 1050:localhost:80 root@IP_address_of_your_Teltonika_router"

2) On the computer that you are using to connect to your Teltonica router open a web browser and type in this URL address: "localhost:1050"

3) The WEB UI of your Teltonica router opens (this is a HTTP connection via SSH tunnel). Login.

4) Reset to factory settings via "System --> Administration --> General --> Restore to Factory Defaults"

---

Just to build on the comment by alekoteuto which helped me, I found out that the Teltonika was blocking all incoming requests directed at it (from the VPN) but that I could still access the other devices on the network via the VPN luckily. Using one of these other linux (user debian below) devices on the network, I was able to confirm with curl that the webpage was still up for the teltonika (curl teltonika-rut-ip). Then, using alekoteuto's answer, I was able to create some tunnels between my PC/debian device/Teltonika RUT.

An example of the commands used is given below:

=== 1st terminal on my PC ===
Create a tunnel between the RUT (10.66.11.2:80) and debian device (localhost:1050).
ssh debian@10.66.11.3
ssh -L 1050:10.66.11.2:80 root@10.66.11.2

=== 2nd terminal on my PC ===
Create a 2nd tunnel to see the webpage now available to debian's localhost. (Checked with curl localhost while logged into debian).
This is between debian (localhost:1050) and my PC (localhost:1051).
ssh -L 1051:localhost:1050 debian@10.66.11.3

=== Web browser on my PC ===
http://localhost:1051/cgi-bin/luci/admin

It turned out that in the Firewall, the Input and Forward for the VPN had been set to Reject...
My head SMH

Answer 3

I have had similar issues on RUT240 and now recently on RUT950 - WEBUI unresponsive over WAN or LAN. After I reduced logging to bare minimum and deleted the logs...see below. The WebUI bounced back immediately after this.

1. SSH into your router

2. Go to log folder using command: cd /log/

3. Run command: rm log.db

4. Run command: /etc/init.d/eventslog restart

Comments

There is no service in /etc/inid.d called eventslog??  Im using the latest firmware.

Also, I also moved log.db to log.db.old and cant login throught webui.