View Full Version : failed to connect with device
internetsaco
11-19-2009, 07:37 AM
UNKNOWN 2009-11-19 10:33:34 Isabelle Harvey 00:15:6D:D4:15:C0 Device operation failed: Failed to set SSH parameters. Response: <HTML><HEAD><TITLE>401 Unauthorized</TITLE></HEAD> <BODY><H1>401 Unauthorized</H1> Your client does not have permission to get URL /services.cgi from this server. </BODY></HTML>
this is the output
im not able to establish link with the device but i can see all of them
im connected with vpn to the network ....
im using windows server 2003 and mozilla firefox 3.5
i have tested ssh connection from the same server and im able to go in so connectivity should be ok
must be something to do with the aircontrol stuff...
UBNT-Thomas
11-19-2009, 12:44 PM
Can you access the AirOS web UI through the browser from the same machine where AirControl runs?
If that works (successfull authentication), please try after that again to connect from AirControl.
internetsaco
11-20-2009, 08:32 AM
Hello thomas able to log via web browser
but with aircontrol cannot connect to the device
firmware loaded XS5.ar2313.v3.4.4390.090521.1803
the scan do detect the device, i must tell you im behind nat
i forwarded port 22 to the server also 9080
i have about 25 unit reporting as expected through VPN
the unit that im not able to connect are not VPN connected
server---> router(nat) devices
UBNT-Thomas
11-20-2009, 11:17 AM
Devices must be layer 3 reachable by the AirControl server. We do not support management of devices behind NAT. You would need to use VPN or another tunnel if you cannot run the server within the subnet. Can you tell me more about your topology and the reason why you are trying to deploy on the other side of NAT?
internetsaco
11-20-2009, 12:35 PM
ok thomas the unit that are beyond the nat are p2p only it is ok just to know that nat isn't supported i will rearrange my network to cope with this info.
thx very much airos is very good by the way
one last question the total byte transfered is it a counter that restart at each 1 of the month ?
UBNT-Thomas
11-21-2009, 01:20 PM
I would actually be interested to explore others take on NAT support. It's the first time the question comes up since we started the beta. Folks manage their units through HTTP today, so they must already be layer 3 reachable and no change should be needed to run AirControl. But it would be good to see this judged from actual operators perspective. Is this seen as limitation and would you prefer to setup your network in other ways if NAT was supported?
They byte counts are reported straight from the device and reset when the unit reboots. For the future we plan to let you report historical data for different periods from the UI (daily, monthly etc.)
oliver.gross
11-23-2009, 03:33 AM
hi thomas,
i'm using nat in my office and want to manage the nanostation5 installed on different villages behind a broadband internet access with official ip-adresses for each unit, for example in one village i'm using 15 units with the ip's 217.243.1xx.xxx without nat.
I'm able to access each unit via ssh oder http for management.
now i want to use AirControl to get a better overview.
i'm only able to manage devices in the same office network, but managing devices, that are out of my office (behind my nat firewall router) are unreachable for management by aircontrol.
"Launch Web UI" is working fine, Ports 9080, 9443, 22 and 9005 are redirected to the pc where aircontrol is installed.
device can be added and hostname could be obtained, but management is unable.
is it really a problem to be behind a nat router when the needed ports are redirected ?
or do you habe a resolution for these kind of connection failure ?
best wishes
oliver from germany
UBNT-Thomas
11-23-2009, 05:10 AM
Oliver,
If you are able to access the units from the same node where AirControl runs through SSH (and HTTP) and HTTP traffic from the units can reach the AirControl sever at port 9080 then it should all work. And yes, the question is not NAT yes or no but whether the ports are layer 3 reachable.
Send me a bit more detail on the issue you see as a private message through the forum with your email address and we should get you up and running. Ich spreche Deutsch.
Thomas
sep78
11-24-2009, 03:34 PM
We have been fighting with this for some time. I'm wondering, what exact TCP and UDP ports have to be allowed for port forwarding. And where in the configuration AP does it store what IP its trying to talk to as it's aircontrol server ?
nathxael
12-14-2009, 04:03 AM
Hey Thomas, just got som M2HP, will be using one as the AP, and the others as client stations. How do i use or implement aircontrol/airmax. Been seeing u guys talking about them, dont really know what they are
