Hi Victor,

On Wednesday, April 16, 2025 at 6:32:24 PM UTC-3 [email protected] 
wrote:
[...] 

Where can I see if my server is ok?


The OpenWISP RADIUS module has a section of its documentation dedicated to 
Debugging 
& Troubleshooting 
<https://openwisp.io/docs/dev/radius/deploy/freeradius.html#debugging-troubleshooting>
 which 
should help.
 

I'm getting timeouts on my Mikrotic and in the FreeRadius log it says that 
the IP is not allowed even though it's listed in: 
OPENWISP_RADIUS_FREERADIUS_ALLOWED_HOSTS


This means that OPENWISP_RADIUS_FREERADIUS_ALLOWED_HOSTS 
<https://openwisp.io/docs/dev/radius/user/settings.html#openwisp-radius-freeradius-allowed-hosts>
 is 
not configured to let OpenWISP accept API requests to /api/v1/freeradius/*/ 
from your freeradius instance.
For security reasons all API requests to use the OpenWISP API endpoints 
dedicated to the freeradius integration need to come from IP addresses that 
are explicitly whitelisted, the docs indicates how to do this either 
globally or per organization.

Are you using docker-openwisp? Or what deployment/installation method are 
you using?
I see that docker-openwisp has a default setting for this:
https://github.com/search?q=repo%3Aopenwisp%2Fdocker-openwisp%20OPENWISP_RADIUS_FREERADIUS_ALLOWED_HOSTS&type=code
What's the IP address that you're receiving which is not allowed?

As Enocks wrote in another reply, you will also need to define the NAS.

I hope this helps.

Federico

-- 
You received this message because you are subscribed to the Google Groups 
"OpenWISP" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion, visit 
https://groups.google.com/d/msgid/openwisp/807616ac-1440-4070-877c-a6468cd3c492n%40googlegroups.com.

Reply via email to