flexiWAN offers a local web interface for initial configuration and troubleshooting. flexiEdge UI is enabled by default on all interfaces and it can be accessed using device IP and port 8080. flexiEdge UI can only be accessed if the device has an active network interface.
After opening the flexiEdge UI page, enter Linux username and password.
Upon logging in with credentials, Home page will display device information and status. From the sidebar additional options can be accessed.
After deploying flexiWAN, post-installation steps can be completed via flexiEdge UI. The sidebar follows post-installation configuration flow:
- System Checker - running system checker verifies your device can run flexiWAN
- Interfaces - Configuring network interfaces
- Settings - inserting token to connect the device to your flexiManage account.
After completing all three steps the device will be connected to your flexiManage account and waiting for approval.
Running system checker¶
System checker is a post-installation tool which verifies system requirements and fixes software configuration errors.
Click on System Checker page and run it to check if the system meets the requirements.
If installed on supported hardware, in most cases there will only be “soft” failures which can be fixed by clicking on “Auto-fix”:
Confirm the output now says system requirements are met and navigate to the interfaces page.
Network interfaces configuration¶
On the following page network interfaces can be viewed or configured. At this point only wired interfaces can be configured while WiFi or LTE interfaces can be configured through flexiManage.
flexiWAN relies on netplan for interfaces configuration. It is recommended to configure WAN and LAN wired interfaces prior to adding the device to flexiManage for recovery purpuses. This way the device is reachable via configured interfaces even when flexiWAN is not running.
After configuring the network interfaces move to the next and final step, settings section from sidebar.
Adding the token¶
On the Settings page users can add a token in order to link the device to their flexiManage account and also optionally edit the UUID..
Troubleshooting & advanced options¶
Troubleshoot page provides access to complete device logs:
- flexiEdge Agent
- DHCP server
Each of the logs can be viewed by clicking on “Fetch Logs” button. Arrow points to “fwdump” function which prepares the full system logs for support troubleshooting purpuses and offers the archive as a download through browser.
Advanced page provides further troubleshooting operations.
- Clear Device Configuration - clearts the configuration and connects the device to flexiManage in non-running state. Use this option to fix misconfiguration or if the vRouter is not starting.
- Reset - running this option requires device deletion from flexiManage first, after which it starts the registration procedure from scratch.
Restricting access to flexiEdge UI¶
In order to increase security, users may want to limit access to flexiEdge UI using iptables. To that, simply enter the following commands using Command tab or device shell:
/sbin/iptables -A INPUT -p tcp ! -s 22.214.171.124 --dport 8080 -j DROP
126.96.36.199 is the IP of the device you wish to allow access from, while blocking all other IP’s. Use
/24 if you wish to allow whole IP range. Make sure to save rules to be persistant on reboot.
Disabling flexiEdge UI¶
Some users may want to disable flexiEdge UI completely after initial configuration. We only recommend disabling local UI after the device is configured and shown as running in flexiManage. flexiEdge UI can be disabled with the following two commands:
systemctl disable flexiwan-router-ui
systemctl stop flexiwan-router-ui
In order to enforce disabling the flexiEdge UI, edit the following file from the command line using nano or vi:
Change the “edgeui” section from true to false and save the file.