Softcloud Wiki
Linux, Raspberry Pi, YunoHost, RaspAP
Recherche
Accueil
Linux
Raspberry Pi
YunoHost
RaspAP
Explorateur
Rechercher
Connexion
Accueil
Explorateur
Ajouter un article
Accueil
Softcloud Wiki
Contribuer
Edition de l'article
FAQ
Les champs marqués * sont obligatoires !
Paramètres
* Contenu
Fermer
Insérer un lien vers un article
Titre de l'article
1
2
3
4
5
Pour insérer un lien vers un article veuillez utiliser la balise link : [link=$a]$b[/link] où $a représente le titre de l'article (sans caractères spéciaux, tel qu'il apparaît dans l'adresse) et $b représente le nom du lien
Couleur du texte
Couleur du fond
Taille du texte
Choisir la taille du texte (px)
Aperçu du texte
Police d'écriture
Andale Mono
Arial
Arial Black
Book Antiqua
Comic Sans MS
Courier New
Georgia
Helvetica
Impact
Symbol
Tahoma
Terminal
Times New Roman
Trebuchet MS
Verdana
Webdings
Wingdings
Alignement
Aligner à gauche
Insérer
Centrer
Insérer
Aligner à droite
Insérer
Justifier
Insérer
Positionnement
Flottant à gauche
Insérer
Flottant à droite
Insérer
Indentation
Insérer
Exposant
Insérer
Indice
Insérer
Titrage
Titre 1
Insérer
Titre 2
Insérer
Titre 3
Insérer
Titre 4
Insérer
Titre 5
Insérer
Liste
Nombre de lignes
Liste ordonnée
Sélectionner
Tableau
Nombre de lignes
Nombre de colonnes
Entête
Sélectionner
Conteneur
Paragraphe
Insérer
Bloc
Insérer
Conteneur personnalisable
Choisir
Bloc champs
Choisir
Abréviation
Choisir
Conteneur personnalisable
Ces critères nécessitent la connaissance des langages HTML/CSS et les propriétés du thème utilisé.
Identifiant
Classes
Style
Bloc champs
Titre du bloc champs
Style
Abréviation
Abréviation
Nom complet
Citation
Auteur de la citation
Citation
Contenu Caché
Cacher le contenu et l'afficher au clic
Insérer
Cacher le contenu aux visiteurs
Insérer
Cacher la fin du contenu aux visiteurs
Insérer
Cacher le contenu aux membres
Insérer
Style
Remarque
Insérer
Question
Insérer
Succès
Insérer
Avertissement
Insérer
Erreur
Insérer
Lien
Adresse du lien
Texte du lien
Adresse email
Adresse email
Texte de la balise
Lien wikipedia
Mot
Définir une langue dans le lien
Sinon
fr
est ajouté automatiquement
Sélectionner
Langue
Allemand
Anglais
Arabe
Arménien
Azéri
Basque
Bélarusse
Bulgare
Catalan
Cebuano
Chinois
Croate
Danois
Espagnol
Espéranto
Estonien
Finlandais
Français
Galicien
Géorgien
Grec
Hebreu
Hindi
Hollandais
Hongrois
Indonésien
Italien
Japonais
Kazakh
Koréen
Lituanien
Malais
Norvegien (nn)
Norvegien (no)
Ourdou
Persan
Polonais
Portugais
Roumain
Russe
Serbo-Croate
Slovaque
Slovène
Serbe
Suédois
Tchétchène
Tchèque
Thai
Turc
Ukrainien
Vietnamien
Winaray
Flux RSS
Nom du module
Choisir un module
Wiki
Catégorie
Nombre d'éléments à afficher
Ancre vers un endroit de la page
Nom de l'ancre
Ajouter le lien vers l'ancre
Sélectionner
Son
Adresse du fichier audio
Vidéo
Adresse de la vidéo
Hébergeur
Fichier distant
Youtube
Dailymotion
Vimeo
Largeur de la vidéo
Hauteur de la vidéo
Ajouter une vignette
Ajouter une image avec un effet lightbox
Adresse de l'image
Largeur max de la vignette (px)
Ajouter une image avec description
Adresse de l'image
Texte alternatif
Description de l'image
Largeur max de l'image (px)
Smileys
Emojis HTML
D'autres emojis sur
unicode-table.com
ou
w3c.com
Smileys
😀
😉
😁
😆
😅
😂
🤣
😊
🙂
😄
🙃
😇
😃
😚
🥰
😙
😍
😗
🥲
😘
🤩
😋
😛
😜
🤪
😝
🤑
🤔
🤭
🤗
🤫
😐
😶
🤨
😬
😏
😑
😒
🙄
🤐
🤥
😌
😔
😪
😴
🤤
🥶
🤧
😷
🤯
🥴
😵
🤒
🥵
🤮
🤕
🤢
🥸
🤠
🥳
🤓
😎
🧐
😕
😖
😧
🥺
😫
😱
😞
😯
😮
😭
😟
😓
😩
😢
😲
😨
🥱
😳
🙁
😥
😣
😦
😰
☠
😤
😈
😡
💀
👿
🤬
😠
💩
🤡
🤖
👽
👾
👻
👺
👹
🙉
🙊
🙋
🗨
💭
💬
💢
💥
💣
💯
💨
💦
💫
💤
👀
💪
🧡
🤎
🤍
🖤
💚
💙
💜
💛
💋
💔
💘
💖
💝
✋
👋
🖖
🖐
🤙
🤞
🤟
🤘
👌
🤌
🤏
👆
👇
👈
👉
🤛
🤜
👍
✊
👊
👎
👐
🤝
👏
🤲
🙏
🙌
Icônes Font Awesome
[fa=fa-style,fa-option]nom de l'icône (sans le "fa-")[/fa]
Code
Chemin vers un fichier
Langage
Text
Sql
Xml
BBCode
Template
HTML
CSS
Javascript
PHP
Asp
Python
Pearl
Ruby
Bash
C
C++
C#
D
Go
Java
Pascal++
Delphi
Fortran
Vb
Asm
Afficher sur une seule ligne
Sélectionner
This guide was written to address some frequently asked questions among users of RaspAP. FAQ items are organized into thematic sections, below, for easier reference. If you would like to see a new FAQ that you feel would assist other users, [url=https://github.com/RaspAP/raspap-webgui/discussions]start a discussion[/url] or [url=https://github.com/RaspAP/raspap-webgui-docs/issues]open an issue[/url]. -- General -- [list][*][url=https://docs.raspap.com/faq/#distros]Why isn't there support for Desktop distributions?[/url][*][url=https://docs.raspap.com/faq/#settings]What do all these settings in the UI do? Changing them seems to have no effect.[/url][*][url=https://docs.raspap.com/faq/#headless]How do I prepare the SD card to connect to WiFi in headless mode?[/url][*][url=https://docs.raspap.com/faq/#interfaces]Can I use wlan0 and wlan1 rather than eth0 for my AP?[/url][*][url=https://docs.raspap.com/faq/#monitor]Can I use RaspAP as a monitor only, without changing my configuration?[/url][*][url=https://docs.raspap.com/faq/#dnsmasq]Can I use RaspAP with my custom dnsmasq configuration?[/url][*][url=https://docs.raspap.com/faq/#maxclients]What is the maximum number of simultaneous clients that I can connect to my AP?[/url][*][url=https://docs.raspap.com/faq/#adapters]Where can I find a list of USB WiFi adapters that use in-kernel drivers?[/url][*][url=https://docs.raspap.com/faq/#passphrase]What are the passphrase requirements used by RaspAP?[/url][*][url=https://docs.raspap.com/faq/#nopw]Can I remove the AP password to create an open WiFi network?[/url][*][url=https://docs.raspap.com/faq/#access]How do I prevent WAN access to RaspAP's web administration?[/url][*][url=https://docs.raspap.com/faq/#minwrite]Can I reduce the risk of SD card corruption and extend a card's lifespan?[/url][/list] -- Troubleshooting -- [list][*][url=https://docs.raspap.com/faq/#actroubleshoot]My 802.11ac 5 GHz hotspot failed to start. What now?[/url][*][url=https://docs.raspap.com/faq/#noip]Clients cannot obtain an IP address from the hotspot.[/url][*][url=https://docs.raspap.com/faq/#webui]My WiFi network disappeared and I can't access the web UI.[/url][*][url=https://docs.raspap.com/faq/#custom]My custom hostapd.conf / php.ini is gone.[/url][*][url=https://docs.raspap.com/faq/#password]I changed the admin password and forgot what it was.[/url][*][url=https://docs.raspap.com/faq/#nowifi]RaspAP control panel works but there is no WiFi after reboot.[/url][*][url=https://docs.raspap.com/faq/#bridged]Bridged AP mode is unstable or clients can't connect.[/url][*][url=https://docs.raspap.com/faq/#pizero-w]Managed mode AP doesn't work on the Pi Zero W.[/url][*][url=https://docs.raspap.com/faq/#scanning]WiFi scanning doesn't work or I get the error "cannot execute wpa_cli reconfigure".[/url][*][url=https://docs.raspap.com/faq/#hostapd-down]I started the hotspot but it shows "hostapd down". What's happening?[/url][*][url=https://docs.raspap.com/faq/#ping]Pinging the AP from a client computer (or vice versa) results in an intermittent failure. Can I troubleshoot this?[/url][*][url=https://docs.raspap.com/faq/#disassociated]My wlan1 keeps being disabled and/or clients are repeatedly disconnected.[/url][*][url=https://docs.raspap.com/faq/#webfail]RaspAP web UI fails to start or unable to save settings.[/url][*][url=https://docs.raspap.com/faq/#token]Why do I receive an 'Invalid CSRF token' message and a blank screen?[/url][*][url=https://docs.raspap.com/faq/#restore]Can I restore RaspAP's default settings?[/url][/list] -- Integrations -- [list][*][url=https://docs.raspap.com/faq/#pihole]How do I integrate RaspAP with Pi-hole?[/url][*][url=https://docs.raspap.com/faq/#adguard]Can I integrate RaspAP with Adguard Home?[/url][*][url=https://docs.raspap.com/faq/#captive]Can I configure RaspAP to work with a captive portal?[/url][*][url=https://docs.raspap.com/faq/#schedule]How do I create an AP activation schedule?[/url][*][url=https://docs.raspap.com/faq/#genpassword]Can I schedule the WiFi password to change automatically?[/url][*][url=https://docs.raspap.com/faq/#managed]Can I configure a managed mode AP without using the UI?[/url][*][url=https://docs.raspap.com/faq/#webport]Can I configure an alternate port for RaspAP's web service?[/url][*][url=https://docs.raspap.com/faq/#docker]What breaks RaspAP when Docker is installed on the same system and how I can fix it?[/url][*][url=https://docs.raspap.com/faq/#omv]Can I integrate RaspAP with OpenMediaVault?[/url][*][url=https://docs.raspap.com/faq/#speedify]Can I use RaspAP to share Speedify's aggregated connections?[/url][*][url=https://docs.raspap.com/faq/#custompages]How do I serve custom pages from RaspAP?[/url][*][url=https://docs.raspap.com/faq/#adblockauto]Can I automatically update RaspAP's adblock lists?[/url][/list] -- OpenVPN -- [list][*][url=https://docs.raspap.com/faq/#openvpn-fails]OpenVPN fails to start and/or I have no internet.[/url][*][url=https://docs.raspap.com/faq/#partial]OpenVPN works but I have partial or no internet access.[/url][*][url=https://docs.raspap.com/faq/#restricted]OpenVPN is enabled but I am still blocked from country restricted websites.[/url][/list] -- WireGuard -- [list][*][url=https://docs.raspap.com/faq/#mimetype]Uploading my WireGuard config results in "MIME type not allowed".[/url][*][url=https://docs.raspap.com/faq/#wgtraffic]I think my traffic isn't being routed through the WireGuard VPN. Can I debug this?[/url][*][url=https://docs.raspap.com/faq/#wglog]How can I clear RaspAP's WireGuard log?[/url][/list] -- Networking -- [list][*][url=https://docs.raspap.com/faq/#wireless-mode]Why can't I access wireless mode 'N' (802.11n)?[/url][*][url=https://docs.raspap.com/faq/#iptables]How do I exclude NAT rules from IP traffic on localhost?[/url][*][url=https://docs.raspap.com/faq/#channels]Why is the channel dropdown disabled on the Hotspot page?[/url][*][url=https://docs.raspap.com/faq/#wirelessn]Why is the maximum throughput of my 802.11n AP reduced by half?[/url][*][url=https://docs.raspap.com/faq/#wep]Can I connect the WiFi client to a WEP network?[/url][*][url=https://docs.raspap.com/faq/#hotspotssh]Can I turn the hotspot on/off over SSH?[/url][/list] -- Install & upgrade -- [list][*][url=https://docs.raspap.com/faq/#upgrade]How do I upgrade RaspAP?[/url][*][url=https://docs.raspap.com/faq/#raspap-service]Do I need the RaspAP service to run at boot?[/url][*][url=https://docs.raspap.com/faq/#unattended]Can the Quick Installer accept the default options without prompting me?[/url][*][url=https://docs.raspap.com/faq/#restore]Can I restore RaspAP's default settings?[/url][*][url=https://docs.raspap.com/faq/#uninstall]How do I uninstall RaspAP?[/url][/list] -- Why isn't there support for Desktop distributions? -- A desktop distribution (or "distro") usually has a very different set of programs that handles various underlying OS functions and wraps it with a pretty GUI. Since RaspAP does quite a bit of configuration on top of a known [url=https://docs.raspap.com/defaults/]default starting point[/url], the more distros a project supports the bigger the task of handling these variations. It becomes increasingly difficult for a small team of developers to support a wide variety of targets. The RaspAP team could spend their precious and rare development time troubleshooting one-offs and edge cases, or work on new features and bug fixes. For this reason, we've chosen to include support for a narrow, but diverse, subset of [url=https://docs.raspap.com/#compatible-operating-systems]compatible operating systems[/url]. -- What do all these settings in the UI do? Changing them seems to have no effect. -- RaspAP manipulates several daemons, services and helper programs behind the scenes for you. In the footer of each management panel is a helpful "Information provided by..." label. These indicate which Linux daemon and/or program is being modified by the UI. Learning what these services are and how they work will go a long way toward demystifying things. [img]https://i.imgur.com/q1RflMy.png[/img] For example, two of the best starting points for understanding [code=text,0,1]hostapd[/code] (the service that implements 802.11 AP management) include the [url=https://wireless.wiki.kernel.org/en/users/Documentation/hostapd]hostapd Linux documentation page[/url] and [url=https://w1.fi/cgit/hostap/plain/hostapd/hostapd.conf]hostapd Wifi homepage[/url]. Info After you choose [b]Save settings[/b] for [code=text,0,1]hostapd[/code] or [code=text,0,1]dhcpcd[/code], these services must be restarted for your changes to take effect. If you're not sure if your AP is behaving as expected, enable logging in the [b]Logging[/b] tab of [b]Hotspot[/b] and check the output. -- How do I prepare the SD card to connect to WiFi in headless mode? -- Since [url=https://www.raspberrypi.org/blog/another-update-raspbian/]May 2016[/url], Raspbian has been able to copy wifi details from [code=text,0,1]/boot/wpa_supplicant.conf[/code] into [code=text,0,1]/etc/wpa_supplicant/wpa_supplicant.conf[/code] to automatically configure wireless network access. An example [code=text,0,1]wpa_supplicant.conf[/code] file is shown below. Replace the fields with your settings: [code=text]ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev update_config=1 country=your_ISO-3166_two-letter_country_code network={ ssid="my_SSID" psk="my_PSK" key_mgmt=WPA-PSK }[/code] -- Can I use wlan0 and wlan1 rather than eth0 for my AP? -- Yes, this is supported by RaspAP. In this scenario, you may wish to use the [code=text,0,1]wlan0[/code] interface as the AP interface with [code=text,0,1]wlan1[/code] as the wireless client interface. Refer to the dedicated [url=https://docs.raspap.com/repeater/]WiFi repeater[/url] walkthrough for steps to enable this configuration. -- Can I use RaspAP as a monitor only, without changing my configuration? -- Yes, RaspAP has support for a so-called "monitor mode". In [code=text,0,1]config.php[/code] change the setting [code=text,0,1]RASPI_MONITOR_ENABLED[/code] to [code=text,0,1]true[/code]. This disables the ability to modify settings, start/stop daemons, shutdown or reboot the RPi. RaspAP will continue to report interface statistics, service settings and data usage as normal. See [url=https://docs.raspap.com/defaults/#managing-config-values]this[/url] for more information. -- Can I use RaspAP with my custom dnsmasq configuration? -- Yes, RaspAP supports this through the use of [code=text,0,1]dnsmasq.d[/code]. The primary [code=text,0,1]/etc/dnsmasq.d/090_raspap.conf[/code] managed by the UI includes the following directive to enable your custom .conf files: [code=text]conf-dir=/etc/dnsmasq.d[/code] Configuration files placed in this directory will be used by the dnsmasq service and are untouched by the UI. -- What is the maximum number of simultaneous clients that I can connect to my AP? -- [b]Short answer:[/b] it depends. [b]Longer answer:[/b] there are several factors that come into play including, but not limited to, the specific RPi model, firmware version, available RAM and so on. Every update to the RPi's firmware takes up more of the limited RAM reserved for WiFi, resulting in less space to host AP clients. Users of RaspAP have reported up to [url=https://github.com/billz/raspap-webgui/issues/462#issuecomment-588367233]19 simultaneous clients[/url] with a RPi 3B, but a smaller number with a newer RPi model. If you are willing to modify your device's firmware and replace the [code=text,0,1]brcmfmac[/code] driver [url=https://github.com/raspberrypi/linux/issues/3010#issuecomment-788323744]with a specific version[/url], a maximum of 20 simultaneous WiFi clients is theoretically possible. [b]Bottom line:[/b] if maximizing AP clients is your primary goal, you will have to either use a specific firmware version or purchase an external wireless adapter. See also: [url=https://github.com/raspberrypi/linux/issues/3010]https://github.com/raspberrypi/linux/issues/3010[/url]. -- Where can I find a list of USB WiFi adapters that use in-kernel drivers? -- There are many USB WiFi adapters that work without the need to install a driver in Linux. The term "in-kernel" refers to drivers that are packaged and maintained by the Linux kernel. This [url=https://github.com/morrownr/USB-WiFi]GitHub list[/url] currently has 60 links to USB WiFi adapters that work without installing drivers (ie., "plug and play") on devices like the Raspberry Pi. With adapters that use in-kernel drivers, you may simply plug the adapter in and it will work. Many people find that using adapters with in-kernel drivers is a better solution than buying an adapter that requires drivers to be found, downloaded, compiled, installed, fixed and reinstalled. -- What are the passphrase requirements used by RaspAP? -- The requirements are based on [url=https://en.wikipedia.org/wiki/IEEE_802.11i-2004]IEEE standard 802.11i-2004[/url] which defines a passphrase as a sequence of between 8 and 63 ASCII-encoded characters. Furthermore, each character in the passphrase must have a decimal encoding in the range of 32 to 126 (IEEE Std. 802.11i-2004, Annex H.4.1). These are often known as [url=https://en.wikipedia.org/wiki/ASCII#Printable_characters]printable characters[/url] that represent letters, digits, punctuation marks and a few miscellaneous symbols. This means that so-called special characters, or extended ASCII codes, are not permitted in a passphrase. For example, the Euro sign "€", German "ä" and British pound symbol "£" fall outside this range. RaspAP will automatically generate a secure passphrase, or PSK, for you. On the [b]Hotspot > Security[/b] tab, click or tap the magic icon next to the PSK input. Choose [b]Save settings[/b] and [b]Restart hotspot[/b] for the changes to take effect. -- Can I remove the AP password to create an open WiFi network? -- Yes. On the [b]Hotspot > Security[/b] tab, select 'None' for Security type. Choose [b]Save settings[/b] and [b]Restart hotspot[/b] for the changes to take effect. -- How do I prevent WAN access to RaspAP's web administration? -- There are two ways to do this. The simplest method is to set the web server's bind address in RaspAP's [b]System > Advanced[/b] tab to the IPv4 address you wish to grant access to. Choose [b]Save settings[/b] and [b]Restart lighttpd[/b]. After this is done, the web server will refuse connections to all IP addresses other than the one you've defined. A somewhat cleaner method with a "403 Forbidden" response can be done manually with lighttpd. You could modify lighttpd's main config directly, but to keep things neater we can use RaspAP's own configuration in lighttpd's [code=text,0,1]/conf-available[/code] directory. Edit it like so: [code=text]sudo nano /etc/lighttpd/conf-available/50-raspap-router.conf[/code] Add the following to the end, substituting the [code=text,0,1]192.168.0.0/16[/code] private IPv4 address range (192.168.0.0 – 192.168.255.255) for your own network: [code=text]# deny access to RaspAP admin for users that # are not in the 192.168.0.0/16 network $HTTP["remoteip"] != "192.168.0.0/16" { url.access-deny = ( "" ) }[/code] Save and exit the file, then restart the lighttpd service: [code=text]sudo systemctl restart lighttpd.service[/code] Clients outside of your defined network range will receive a '403' response when accessing the web UI. -- Can I reduce the risk of SD card corruption and extend a card's lifespan? -- Yes. RaspAP has developed a [url=https://docs.raspap.com/minwrite/]minimal write mode[/url] that substantially reduces disk I/O activity and helps to extend the life of microSD cards. -- My 802.11ac 5 GHz hotspot failed to start. What now? -- RaspAP uses [url=https://wireless.wiki.kernel.org/en/users/documentation/iw][code=text,0,1]iw[/code][/url] and the [url=https://wireless.wiki.kernel.org/en/developers/Regulatory/wireless-regdb][code=text,0,1]wireless-regdb[/code][/url] to determine which channels are allowed for your configured country. However, not all channels may be supported by your device's wireless adapter or firmware. If your 5 GHz access point fails to start, use the steps below to troubleshoot the problem. Begin by enabling [code=text,0,1]hostapd[/code] service logging by sliding the [b]Logfile output[/b] toggle on the [b]Hotspot > Logging[/b] tab. Choose [b]Save settings[/b] followed by [b]Restart hotspot[/b] and check the log output. The logs will often indicate when a selected channel is not supported by the hardware. For example: [code=text]wlan0: IEEE 802.11 Hardware does not support configured channel Could not select hw_mode and channel. (-3)[/code] This may occur with the Raspberry Pi or another device's onboard wireless chipset, or an external wireless adapter. To mitigate this, select one of the following 5 GHz channels: [code=text,0,1]36[/code], [code=text,0,1]40[/code], [code=text,0,1]44[/code] or [code=text,0,1]48[/code], then choose [b]Save settings[/b]. Click or tap the [b]Clear log[/b] button on the [b]Hotspot > Logging[/b] tab, if needed, and finally choose [b]Restart hotspot[/b]. Check the logs again and see if the error persists. If the 802.11ac AP still fails to start, an [url=https://docs.raspap.com/faq/#adapters]external AC wireless adapter[/url] with in-kernel drivers is an option worth considering. -- Clients cannot obtain an IP address from the AP. -- Clients may receive a "failed to obtain IP address" or similar error message when connecting to your AP. These are the most frequent reasons for this error: [list=ordered][*]A poor WiFi signal from the access point. In this event, reduce the distance between your device and the AP.[*]Your device does not operate properly with the encryption method set by the AP.[*]The access point is misconfigured.[/list] The first and simplest fix is to reconnect the client to your WiFi network. When you do this, the AP forgets the previous attempt and initiates a new process to assign an IP address to your device. Exact methods vary between devices, however most will have a 'Forget this network' option or similar in the WiFi settings. This is shown in iOS, below: [img]https://i.imgur.com/7xvx5JT.png[/img] If clients still fail to connect, restart the AP. You may do this by choosing [b]Restart hotspot[/b] from RaspAP. This reinitializes several related services in a predictable order and timing. Assuming these services are configured to restart automatically on reboot (the default behavior when RaspAP's installer is used) you may also simply reboot your Pi. RaspAP gives you control over many aspects of your WiFi network, including DHCP. With its [url=https://docs.raspap.com/defaults/]default settings[/url], RaspAP has been rigorously tested and validated to provide connectivity in routed AP mode. If you suspect that RaspAP is misconfigured and not providing IP addresses to clients, you may troubleshoot this yourself. Clients connecting to your AP are assigned, or leased, an IP address with [code=text,0,1]dnsmasq[/code]. You can see how this process works by enabling the [b]Log DHCP requests[/b] option in the [b]DHCP Server > Logging[/b] tab. When a client connects to your AP, a typical [code=text,0,1]dnsmasq-dhcp[/code] exchange follows this pattern: [code=text]dnsmasq-dhcp[2516]: DHCPDISCOVER(wlan0) [MAC address] dnsmasq-dhcp[2516]: DHCPOFFER(wlan0) 10.3.141.249 [MAC address] dnsmasq-dhcp[2516]: DHCPREQUEST(wlan0) 10.3.141.249 [MAC address] dnsmasq-dhcp[2516]: DHCPACK(wlan0) 10.3.141.249 [MAC address] iPhone[/code] If one or more steps in this exchange are missing, either your device is unable to respond to the server's [code=text,0,1]DHCPOFFER[/code] or the AP itself is misconfigured. Tip By default, the [code=text,0,1]dnsmasq[/code] service listens on TCP/UDP port 53 and UDP port 67. If you have configured firewall software such as [code=text,0,1]ufw[/code] or [code=text,0,1]iptables[/code] to filter traffic on these ports, the service may not be able to respond to DHCP requests. As a last resort, you can assign a static IP address to your device. Copy the MAC address for your device as it appears above and create a new entry in RaspAP's [b]DHCP Server > Static Leases[/b] tab. Save settings, restart [code=text,0,1]dnsmasq[/code] and try connecting your client again. -- My WiFi network disappeared and I can't access the web UI -- If you are running your Pi headless and are unable to access RaspAP's web interface from the default [code=text,0,1]http://10.3.141.1/[/code] address, do the following: [list=ordered][*]Be sure your browser isn't forcing SSL by appending [code=text,0,1]https://[/code] to the address, which can result in misleading errors. This may sound obvious but it's reported frequently. (Related: add [url=https://docs.raspap.com/ssl/]SSL support for RaspAP[/url].[*]Connect your device to wired ethernet and access it via the browser or SSH on the [code=text,0,1]eth0[/code] interface using one of the methods described below. [url=https://docs.raspap.com/ap-basics/#troubleshooting]Check the logs for hostapd errors[/url] and reconfigure the service, or run the installer again to restore the [url=https://docs.raspap.com/defaults/]default configuration[/url].[*]There are [url=https://www.raspberrypi.com/documentation/computers/remote-access.html]several methods[/url] you can use to determine your Pi's IP address. RaspAP's installer only configures a static IP address for the AP interface on [code=text,0,1]wlan0[/code]. If the AP has entered a failed state, you may still be able to connect on an alternate interface.[*]Recent versions of the RPi OS kernel include the [code=text,0,1]avahi-daemon[/code] which facilitates local network discovery via multicast DNS (mDNS). On client computers with the Bonjour service installed (all macOS machines and Windows PCs with Apple iTunes), try accessing your Pi by entering [url=http://raspberrypi.local/]http://raspberrypi.local/[/url] in the browser or via SSH with [code=text,0,1]ssh pi@raspberrypi.local[/code].[*]If you don't have access to wired ethernet or the above methods fail, configure your Pi for USB-OTG, also known as "on-the-go" or gadget mode. Instructions for enabling USB-OTG vary between various models and not all Pi hardware has support for this.[/list] -- My custom hostapd.conf / php.ini is gone. -- The [url=https://docs.raspap.com/quick/]installer[/url] applies a "known good" [url=https://docs.raspap.com/defaults/]default configuration[/url] to some services, including [code=text,0,1]hostapd[/code]. It will also, optionally, optimize PHP by changing a very limited number of settings. Your custom configurations haven't been lost however; they've been moved to the backups directory in [code=text,0,1]/etc/raspap/backups[/code]. You are free to SSH in to restore those files to their rightful position. However, you may need to ensure that the RaspAP modifications are applied to your own custom configurations. -- I changed the admin password and forgot what it was. -- Login credentials are stored in [code=text,0,1]/etc/raspap/raspap.auth[/code]. The password is encrypted and cannot be edited manually. However, deleting this file with [code=text,0,1]sudo rm /etc/raspap/raspap.auth[/code] will restore the default admin password. -- RaspAP control panel works but there is no WiFi after reboot. -- This problem often occurs when another program tries to reconfigure hostapd at startup. It can also happen when your RPi is configured as both a WiFi client and access point, also known as a [url=https://docs.raspap.com/ap-sta/]managed mode[/url] AP. To address this, RaspAP has added a [code=text,0,1]systemd[/code] init service to bring up networking services in a predictable order and timing after the Linux kernel is booted. You can check the status of this service with: [code=text]sudo systemctl status raspapd.service[/code] The [code=text,0,1]raspapd.service[/code] is optionally installed and enabled by the Quick Installer. It is also included in the manual setup steps. -- Bridged AP mode is unstable or clients can't connect. -- RaspAP [url=https://docs.raspap.com/bridged/]delegates all DHCP control to your router[/url] in bridged AP mode. If you have trouble connecting clients, start with this project's [url=https://docs.raspap.com/issues/#default-settings]default configuration[/url] in routed AP mode [i]first[/i] and try connecting a client. Enable logging for DHCP and hostapd to help you identify any problems. If you have no issues with client connectivity with the default routed AP, but cannot connect clients in bridged AP mode, in most cases the problem lies with your router—not RaspAP. Check your router's web interface and DHCP settings. If clients disconnect intermittently, this often indicates an undervoltage issue with your RPi. Check the kernel log for any [code=text,0,1]Under-voltage detected![/code] errors. Be sure you are using an official 5.1V power supply (each model has [url=https://www.raspberrypi.org/documentation/hardware/raspberrypi/power/README.md]different power requirements[/url]) and detach any USB devices. Executing [code=text,0,1]dmesg | grep br0[/code] can also offer clues. Execute [code=text,0,1]sudo dhclient -v[/code] to gain insights into DHCP requests between your device and router. A typical DHCP exchange follows this pattern: [code=text]CLIENT -> DHCPDISCOVER SERVER -> DHCPOFFER CLIENT -> DHCPREQUEST SERVER -> DHCPACK[/code] If your device (the client) broadcasts [code=text,0,1]DHCPDISCOVER[/code], but there is no [code=text,0,1]DHCPOFFER[/code] response from your router, you have a misconfiguration or other issue with your network. Troubleshooting client connectivity in bridged AP mode is not supported. No hard feelings. -- Managed mode AP doesn't work on the Pi Zero W. -- See [url=https://docs.raspap.com/ap-sta/]this walkthrough[/url] where the installation is described in detail. -- WiFi scanning doesn't work or I get the error cannot execute "wpa_cli reconfigure" . -- On some configurations, the [b]Configure WiFi client[/b] panel may appear empty. This project uses the [code=text,0,1]wpa_supplicant[/code] command line client [code=text,0,1]wpa_cli[/code] to populate a list of available wireless networks. If you can't execute this from the shell, neither can the web UI. For example, the results of this command: [code=text]sudo wpa_cli -i wlan0 scan_results Failed to connect to non-global ctrl_ifname: wlan0 error: No such file or directory[/code] ...indicate a problem with the socket used to communicate with [code=text,0,1]wpa_supplicant[/code]. You may also encounter errors such as "Could not connect to wpa_supplicant: wlan0 - re-trying". If this happens, first check the contents of [code=text,0,1]wpa_supplicant[/code] with [code=text,0,1]sudo cat /etc/wpa_supplicant/wpa_supplicant.conf[/code]. You should see, at minimum, the following: [code=text]ctrl_interface=DIR=/var/run/wpa_supplicant GROUP=netdev update_config=1[/code] The above is present on clean installs of Raspbian. If you've made changes to this file, ensure that these lines appear first. Next, reinitialize the socket with: [code=text]sudo wpa_supplicant -B -Dnl80211,wext -c/etc/wpa_supplicant/wpa_supplicant.conf -iwlan0[/code] substituting [code=text,0,1]wlan0[/code] with your wireless interface, if necessary. You should then be able to perform scans as expected. Tip If you are using [code=text,0,1]wpa_suplicant.conf[/code] to connect to your device with SSH on a wireless interface, do [i]not[/i] reboot after running the Quick Installer. More information on this topic is [url=https://docs.raspap.com/ap-sta/#when-to-reboot]available here[/url]. -- I started the hotspot but it shows "hostapd down". What's happening? -- Hostapd, the Linux service that creates the access point, can fail to start for a variety of reasons. The following are common causes, with troubleshooting advice: [list=ordered][*]If you've attached an external wireless adapter (bound to [code=text,0,1]wlan1[/code], for example) and have selected this as the AP interface, be sure that it either uses an [url=https://docs.raspap.com/faq/#adapters]in-kernel driver[/url], also known as "plug and play" support, or that you have installed the correct driver for it.[*]Confirm that the 802.11 wireless mode you've selected is supported by the adapter you've chosen in the list of available interfaces. For example, if you've selected the [code=text,0,1]802.11ac 5 GHz[/code] wireless mode with incompatible hardware, RaspAP will create the configuration for you but [code=text,0,1]hostapd[/code] will fail to start.[/list] In each of these cases, the [code=text,0,1]hostapd[/code] service will report errors that can be useful for troubleshooting. Enable logging by selecting [b]Logfile output[/b] on the [b]Hostapd > Logging[/b] tab, choose [b]Save settings[/b] then [b]Restart hotspot[/b]. Refer to [url=https://docs.raspap.com/faq/#actroubleshooting]this FAQ[/url] and [url=https://docs.raspap.com/faq/#disassociated]this FAQ[/url] for more info. -- Pinging the AP from a connected client computer (or vice versa) results in an intermittent failure. Can I troubleshoot this? -- An intermittent ping failure on the wireless interface could indicate any number of things; a poor wireless signal, co-channel interference and disassociated client being among the most common. The following are methods for troubleshooting this: [list=ordered][*]Get a signal strength report. A signal of -80 dBm or less from your AP is unreliable. If your client computer supports Linux, use [code=text,0,1]sudo iw dev wlan0 scan | awk '/signal:/{sta=$2$3} /SSID:/{print $0" "sta}'[/code] and check your AP's dBm value. Alternatively, use any one of several graphical WiFi explorer type tools and obtain your signal strength this way.[*]Use [code=text,0,1]wavemon[/code] on the AP to scan for overlapping channels from nearby APs. Install it with [code=text,0,1]sudo apt install wavemon[/code]. If it shows an AP with a strong signal on the same channel as your AP, you are likely experiencing co-channel interference. Select a different channel or band for your AP, restart it and compare the results.[*]Use [code=text,0,1]mtr[/code] to run a continuous scan that reports on latency and percentage packet loss. Install it with [code=text,0,1]sudo apt install mtr-tiny[/code]. Obtain your client's IPv4 address from the dashboard or [b]DHCP Server > Client list[/b] and start the utility, for example [code=text,0,1]mtr 10.3.141.151[/code]. While the scan is running, reposition your client computer and/or your AP and observe the results.[*]Enable [code=text,0,1]hostapd[/code] service logging from RaspAP with [b]Hotspot > Logging > Logfile output[/b], followed by [b]Save settings[/b] and restart your AP. Look for errors that indicate clients are being disassociated from the AP. Refer to [url=https://docs.raspap.com/faq/#disassociated]this FAQ[/url] for more info.[/list] -- My wlan1 keeps being disabled and/or clients are repeatedly disconnected. -- Issues [url=https://github.com/RaspAP/raspap-webgui/issues/666]such as this[/url] can be tricky to diagnose. In this case, an AP is started with an external USB wireless adapter, but client devices are continuously authenticated and disconnected (or "disassociated"). This may appear in [code=text,0,1]hostapd[/code] service logs like so: [code=text]wlan1: STA 24:62:ab:fd:24:34 IEEE 802.11: authenticated wlan1: STA 24:62:ab:fd:24:34 IEEE 802.11: associated (aid 1) wlan1: AP-STA-CONNECTED 24:62:ab:fd:24:34 wlan1: STA 24:62:ab:fd:24:34 RADIUS: starting accounting session 1D0030DD3176A315 wlan1: STA 24:62:ab:fd:24:34 WPA: pairwise key handshake completed (RSN) wlan1: AP-STA-DISCONNECTED 24:62:ab:fd:24:34 wlan1: STA 24:62:ab:fd:24:34 IEEE 802.11: disassociated wlan1: STA 24:62:ab:fd:24:34 IEEE 802.11: deauthenticated due to inactivity (timer DEAUTH/REMOVE)[/code] The AP itself may also fail repeatedly with errors like the following: [code=text]wlan1: INTERFACE-ENABLED Failed to set beacon parameters wlan1: INTERFACE-DISABLED wlan1: INTERFACE-ENABLED Failed to set beacon parameters wlan1: interface state ENABLED->DISABLED wlan1: AP-DISABLED wlan1: CTRL-EVENT-TERMINATING [/code] If you see messages indicating "deauthenticated due to inactivity", you can try the "Disable [code=text,0,1]disassoc_low_ack[/code]" setting on the [b]Hotspot > Advanced[/b] tab. Choose [b]Save settings[/b] then restart your AP. Monitor the hostapd service logs and see if your clients are able to remain connected. In this specific case, the user determined that the external [url=https://unix.stackexchange.com/questions/610338/raspberry-pi-4-model-b-external-rt3070-wifi-adapter-hostapd-crashing]RT3070 WiFi adapter[/url] was at fault. -- RaspAP web UI fails to start or unable to save settings. -- After performing a clean install of RaspAP or upgrading an existing installation, the web UI may fail to start or the admin panel may behave in unexpected ways. For example, pages may load but any attempt to save settings will fail. In other cases, the lighttpd web server may fail to respond completely. Errors such as these in [code=text,0,1]/var/log/lighttpd/error.log[/code] are common: [code=text](gw_backend.c.503) bind failed for: unix:/run/lighttpd/php.socket-0: No such file or directory (gw_backend.c.601) gw-backend failed to start: /usr/bin/php-cgi (gw_backend.c.1655) [ERROR]: spawning gw failed[/code] These signs point to a corrupted filesystem on the SD card. If during a power disconnection the memory card is in a write operation, there is a high chance that one or more sectors will be damaged. In these cases, a fresh install on a new SD card can save you time and frustration. RaspAP's [url=https://docs.raspap.com/minwrite/]minimal SD card write[/url] mode can help in this case. Tip Be sure to use genuine MicroSD cards from a reputable manufacturer. Card clones are common and hard to distinguish from legitimately made ones, but certainly not subject to the same quality standards. Neither fake nor cheap cards are typically suitable for an entire OS to run from. -- Why do I receive an 'Invalid CSRF token' message and a blank screen? -- A [url=https://owasp.org/www-community/attacks/csrf]cross-site request forgery[/url] (CSRF) is a type of exploit where unauthorized commands are executed against a website on behalf of a trusted user. To guard against this, RaspAP generates a one-time token that is unique for every user and stored in the PHP session object. This token value is inserted into a hidden field on every form in the RaspAP application. If the token doesn’t exist in the submitted form data or fails to match with the token on the server, the form will reject the submission and return an error. The most common cause for this error message is when your PHP session expires. By default, the PHP session timeout is defined as 24 minutes (1440 seconds). When this timeout is reached stored data will be seen as "garbage" and cleaned up by the garbage collection process. If you submit a form in RaspAP 24 minutes after the page was loaded, the application will return a CSRF token error. When this occurs, simply refresh the page to generate a new session token. -- Can I restore RaspAP's default settings? -- Yes, two methods are [url=https://docs.raspap.com/defaults/#restoring-settings]described here[/url]. -- How do I integrate RaspAP with Pi-hole? -- There have been several discussions around integrating RaspAP with Pi-hole, with the end goal of hosting a complete AP and ad-blocker on a single device. Both projects rely on [code=text,0,1]dnsmasq[/code], so integration between them is tricky. There are now several options available to users of RaspAP. [list=ordered][*]The first option is to configure RaspAP to use a Pi-Hole installation on a separate device. Go to RaspAP's [b]DHCP Server[/b] > [b]Advanced[/b] page and enable the "Upstream DNS Server" option, add your Pi-Hole's DNS, save settings and restart dnsmasq.[*]Alternatively, you can run Pi-Hole and RaspAP on the same device by operating RaspAP in bridged mode. Go to RaspAP's [b]Hotspot[/b] > [b]Advanced settings[/b] page, enable the "Bridged AP mode" option and restart your hotspot.[*]Install Pi-Hole in a [url=https://hub.docker.com/r/pihole/pihole]Docker container[/url] and proceed with a normal installation of RaspAP on the same device.[*]Finally, and by popular demand, RaspAP has released its own [url=https://docs.raspap.com/adblock/]ad blocking facility[/url] with support for custom blocklists.[/list] -- Can I integrate RaspAP with Adguard Home? -- Yes, you can run RaspAP and [url=https://github.com/AdguardTeam/AdGuardHome]Adguard Home[/url] on the same device. Change Adguard Home’s listening port to [code=text,0,1]5300[/code] and bind to [code=text,0,1]127.0.0.1[/code], then go to RaspAP's > [b]DHCP Server[/b] > [b]Advanced[/b] page and enable the "Upstream DNS Server". Add [code=text,0,1]127.0.0.1#5300[/code] as an upstream DNS Server. Save settings and restart dnsmasq. Tip via [url=https://github.com/RaspAP/raspap-webgui/issues/542#issuecomment-609078400]@firestrife23[/url] -- Can I configure RaspAP to work with a captive portal? -- Yes. The [url=https://github.com/nodogsplash/nodogsplash]nodogsplash project[/url] works just fine with RaspAP and is recommended over other methods. A detailed setup guide is [url=https://docs.raspap.com/captive/]available here[/url]. -- How do I create an AP activation schedule? -- This is a common function in consumer wireless routers. For example, let's assume you want to disable your AP on Monday through Friday between 02:00 and 08:00. You can implement this with [code=text,0,1]cron[/code] to stop/start RaspAP's service control script at certain times. Run [code=text,0,1]sudo crontab -e[/code] and add entries like so: [code=text]# Stop RaspAP services at 02:00 on Monday through Friday 0 2 * * 1-5 sudo /etc/raspap/hostapd/servicestart.sh --action stop # Start RaspAP services at 08:00 on Monday through Friday 0 8 * * 1-5 sudo /etc/raspap/hostapd/servicestart.sh --seconds 3[/code] For help with crontab, head over to [url=https://crontab.guru/]crontab.guru[/url]. -- Can I schedule the WiFi password to change automatically? -- Yes. Here's [url=https://gist.github.com/billz/2cc43e96563293d650e313e068d52dfb]one way to do it[/url] using bash. Save the script to your home directory ([code=text,0,1]/home/pi[/code] for example) and set the execution bit with [code=text,0,1]sudo chmod +x genpassphrase.sh[/code]. When executed, the script will automatically generate a strong password (or a weaker, pronounceable one), update the [code=text,0,1]wpa_passphrase[/code] setting in [code=text,0,1]hostapd.conf[/code] and finally restart the [code=text,0,1]raspapd.service[/code]. The new passphrase and QR code will be visible on the [b]Hotspot > Security[/b] tab. This can be useful if you're using RaspAP to serve WiFi to clients in a public place, and need to update the passphrase regularly. Similar to creating an [url=https://docs.raspap.com/faq/#schedule]AP activation schedule[/url], you can have this execute at specific intervals by using [code=text,0,1]cron[/code]. Run [code=text,0,1]sudo crontab -e[/code] and add an entry like so: [code=text]# Generate a new passphrase and restart RaspAP everyday at midnight @midnight /home/pi/genpassphrase.sh[/code] For help with crontab, head over to [url=https://crontab.guru/]crontab.guru[/url]. -- Can I configure a managed mode AP without using the UI? -- Yes. Let's assume you are creating an RPi OS image (or other supported OS) with scripts that setup RaspAP at first startup. In this scenario, to configure a managed mode AP you must manually connect via a browser, make some changes via the UI and then save your settings. This can be also be done programmatically. Assuming you have [url=https://docs.raspap.com/faq/#headless][code=text,0,1]wpa_supplicant.conf[/code] fully populated[/url] and a valid [url=https://docs.raspap.com/ap-sta/#how-does-ap-sta-work][code=text,0,1]hostapd.conf[/code][/url], set the following values in [code=text,0,1]/etc/raspap/hostapd.ini[/code]: [code=text]LogEnable = 0 WifiAPEnable = 1 BridgedEnable = 0 WifiManaged = wlan0[/code] substituting [code=text,0,1]wlan0[/code] for your AP interface, if necessary. You may then restart the raspap daemon with [code=text,0,1]sudo systemctl restart raspapd.service[/code]. -- Can I configure an alternate port for RaspAP's web service? -- Yes. You can now do this from the [b]Advanced[/b] tab in System. Manual steps for changing [code=text,0,1]lighttpd[/code]'s default port are included below. Edit [code=text,0,1]/etc/lighttpd/lighttpd.conf[/code] and change the following line: [code=text]server.port = 8080[/code] then give the service a kick... [code=text]sudo systemctl restart lighttpd.service[/code] You can then access RaspAP as before with the new port number in the URI, for example, [code=text,0,1]http://raspberrypi.local:8080[/code]. This will allow you run another web server alongside lighttpd, if that is your goal. -- What breaks RaspAP when Docker is installed on the same system and how I can fix it? -- Installing RaspAP after installing Docker often results in connected clients not having internet access from the AP. The reason for this is Docker manipulates [code=text,0,1]iptables[/code] rules to provide network isolation. Docker installs two custom iptables chains named [code=text,0,1]DOCKER-USER[/code] and [code=text,0,1]DOCKER[/code], and it ensures that incoming packets are always checked by these two chains first. Docker also sets the policy for the [code=text,0,1]FORWARD[/code] chain to [code=text,0,1]DROP[/code]. When RaspAP is started in its default router mode, this will result in the AP not forwarding traffic anymore. If you want RaspAP to continue functioning as a router, you can add explicit [code=text,0,1]ACCEPT[/code] rules to the [code=text,0,1]DOCKER-USER[/code] chain to allow it: [code=text,0,1]sudo iptables -I DOCKER-USER -i src_if -o dst_if -j ACCEPT[/code] When Docker is correctly installed [i]after[/i] RaspAP, the following [code=text,0,1]iptables[/code] chain should be present: [code=text]Chain INPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination DOCKER-USER all -- anywhere anywhere DOCKER-ISOLATION-STAGE-1 all -- anywhere anywhere ACCEPT all -- anywhere anywhere ctstate RELATED,ESTABLISHED DOCKER all -- anywhere anywhere ACCEPT all -- anywhere anywhere ACCEPT all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain DOCKER (1 references) target prot opt source destination[/code] Additional info [url=https://github.com/RaspAP/raspap-webgui/issues/458#issuecomment-643425658]here[/url] and [url=https://docs.docker.com/network/iptables/]here[/url]. [b]tl;dr:[/b] Install RaspAP [i]first[/i], followed by Docker, adding the explicit [code=text,0,1]iptables[/code] rule [code=text,0,1]sudo iptables -I DOCKER-USER -i src_if -o dst_if -j ACCEPT[/code]. -- Can I integrate RaspAP with OpenMediaVault? -- Yes, you can run RaspAP alongside [url=https://www.openmediavault.org/]OpenMediaVault[/url] for a complete media center and wireless hotspot on a single device. In this way, you are able to share the media storage in your local network via a wireless hotspot while connected to a router via ethernet. This is illustrated in the schematic below: [code=text][Router] <---- eth ----> [Pi] (RaspAP + OMV5) | | WiFi 1 WiFi 2 (subnet)[/code] Follow these steps to create this configuration: [list=ordered][*]Follow RaspAP's [url=https://docs.raspap.com/quick/]Quick start[/url] guide and set up your network as you wish.[*]Change the default Web server port to [code=text,0,1]8080[/code] (so that it doesn't conflict with OMV5), from RaspAP's [b]System > Advanced[/b] panel.[*]Install OMV5 skipping network configuration.[*]Configure your OMV5 install without changing the network settings.[*]To make your OMV5 drives accessible from the subnet (WiFi 2), add the following settings at the end of [b]OMV Control panel > Menu > SMB/CIFS > Settings Tab > Extra Options[/b]:[/list] [code=text]bind interfaces only = yes interfaces = lo eth0[/code] Source: [url=https://forum.openmediavault.org/index.php?thread/39060-raspap-and-omv5-media-center-wifihotspot-with-ethernet/]openmediavault forums[/url]. -- Can I use RaspAP to share Speedify's aggregated connections? -- Yes, RaspAP is compatibile with Speedify's connection bonding. In this scenario, you may want to combine several internet connections (for example, a DSL connection, 4G cellphone and an LTE router) and share these via RaspAP. Begin by running Speedify's [url=https://support.speedify.com/article/562-install-speedify-linux]one step install[/url], login with your credentials and connect Speedify. Next, [url=https://support.speedify.com/article/566-speedify-linux-wifi]configure Speedify for WiFi sharing[/url] by editing the following file: [code=text]sudo nano /etc/speedify/speedify.conf[/code] Make sure to uncomment the following lines (remove the "[code=text,0,1]#[/code]" symbol). To share over the Wi-Fi interface [code=text,0,1]wlan0[/code], set: [code=text]ENABLE_SHARE=1 SHARE_INTERFACE="wlan0" WIFI_INTERFACE="wlan0" [/code] Once you have configured the sharing settings, save the file (if you are using nano, use [b]Ctrl[/b]+[b]O[/b] and press [b]Enter[/b] to save). Exit the text editor and then execute: [code=text]sudo service speedify-sharing restart[/code] Refer to [url=https://support.speedify.com/article/566-speedify-linux-wifi]Speedify's support article[/url] for additional tips and troubleshooting. -- How do I serve custom pages from RaspAP? -- Several users have asked if they can extend RaspAP or otherwise serve their own custom directory with the existing [code=text,0,1]lighttpd[/code] web service. Broadly, there are two approaches to achieve this. In the examples below, we will add support for a custom directory called "admin". [b]Option 1.[/b] Create a subdirectory of RaspAP's default install location ([code=text,0,1]/var/www/html[/code]) called "admin": [code=text,0,1]/var/www/html/admin[/code]. Now, modify RaspAP's [url=https://docs.raspap.com/manual/#create-the-web-application]application routing rules[/url] by adding this directory to the exclusion list. You may do this with [code=text,0,1]sudo nano /etc/lighttpd/conf-available/50-raspap-router.conf[/code]. Next, modify the following line like so: [code=text]$HTTP["url"] =~ "^/(?!(dist|app|ajax|config|admin)).*" {[/code] Note that "admin" is appended above "config", above. This instructs lighttpd not to rewrite URLs that match this pattern. Reload the lighttpd service with [code=text,0,1]sudo systemctl reload lighttpd.service[/code]. You may now create your own [code=text,0,1]index.php[/code] file in this folder and request it from the browser as [code=text,0,1]http://10.3.141.1/admin/[/code] or [code=text,0,1]http://raspberrypi.local/admin[/code]. [b]Option 2.[/b] Reinstall RaspAP and specify a custom install destination, for example [code=text,0,1]/var/www/html/raspap[/code]. This will leave the default web root free for you to create any files you wish, without attempting to rewrite the URLs (the installer will only apply routing rules to your custom RaspAP root). -- Can I automatically update RaspAP's adblock lists? -- RaspAP's [url=https://docs.raspap.com/adblock/]adblock feature[/url] uses several [url=https://docs.raspap.com/adblock/#blocklist-source]blocklists[/url] that are aggregated and updated daily. In a typical setup, you may use the [b]Ad blocking[/b] management page to manually update these lists. Alternatively, this [url=https://github.com/RaspAP/raspap-webgui/discussions/1216]user-contributed script[/url] will automatically fetch the latest blocklists on the schedule of your choosing (for example, daily, weekly, etc.) and reload [code=text,0,1]dnsmasq[/code]. [code=text]#!/bin/sh # sleep $(shuf -i 0-3600 -n1) curl -L https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts > /etc/raspap/adblock/hostnames.tmp curl -L https://big.oisd.nl/dnsmasq > /etc/raspap/adblock/domains.tmp mv /etc/raspap/adblock/hostnames.tmp /etc/raspap/adblock/hostnames.txt mv /etc/raspap/adblock/domains.tmp /etc/raspap/adblock/domains.txt chown root:www-data /etc/raspap/adblock/hostnames.txt chown root:www-data /etc/raspap/adblock/domains.txt sudo systemctl reload dnsmasq.service[/code] Credit to [url=https://github.com/DanielLester83]DanielLester83[/url]. -- OpenVPN fails to start and/or I have no internet. -- RaspAP supports OpenVPN clients by uploading a valid [code=text,0,1].ovpn[/code] file to [code=text,0,1]/etc/openvpn/client[/code] and, optionally, creating a [code=text,0,1]login.conf[/code] file with your client auth credentials. Additionally, in line with the project's [url=https://docs.raspap.com/defaults/]default configuration[/url], the following iptables rules are added to forward traffic from OpenVPN's [code=text,0,1]tun0[/code] interface to your configured wireless interface ([code=text,0,1]wlan0[/code] is the default): [code=text]-A FORWARD -i tun0 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -i wlan0 -o tun0 -j ACCEPT[/code] After starting the OpenVPN service, you may check and validate these rules like so: [code=text]$ sudo iptables -L FORWARD -v -n Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 1955 1493K ACCEPT all -- tun0 wlan0 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED 1715 194K ACCEPT all -- wlan0 tun0 0.0.0.0/0 0.0.0.0/0[/code] It is your responsibility to provide a valid [code=text,0,1].ovpn[/code] file. RaspAP does not attempt to validate the settings or RSA keys contained in this file. If OpenVPN fails to start, check for errors with [code=text,0,1]sudo systemctl status openvpn-client@client[/code] and [code=text,0,1]journalctl --identifier openvpn[/code]. -- OpenVPN works but I have partial or no internet access. -- Issues [url=https://github.com/RaspAP/raspap-webgui/issues/612]like this[/url] are frequently reported. Begin by confirming the status of your connection: [code=text]$ sudo systemctl status openvpn-client@client ● openvpn-client@client.service - OpenVPN tunnel for client Loaded: loaded (/lib/systemd/system/openvpn-client@.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2020-06-12 15:45:41 CDT; 1min 39s ago Docs: man:openvpn(8) https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage https://community.openvpn.net/openvpn/wiki/HOWTO Main PID: 2689 (openvpn) Status: "Initialization Sequence Completed" Tasks: 1 (limit: 2200) Memory: 1.1M CGroup: /system.slice/system-openvpn\x2dclient.slice/openvpn-client@client.service └─2689 /usr/sbin/openvpn --suppress-timestamps --nobind --config client.conf[/code] You can also use [code=text,0,1]journalctl --identifier openvpn[/code] to identify any errors. If your internet access is intermittent or otherwise degraded with the [code=text,0,1]openvpn-client[/code] active, the next step is to test your connection for packet loss and latency. There are many Linux tools you can use to diagnose your network. [code=text,0,1]mtr[/code] is a good choice as it combines functionality of the traceroute and ping programs. Install and use it to perform your own evaluation: [code=text]sudo apt install mtr -y sudo mtr -rwc 50 -i 0.2 -rw duckduckgo.com Start: 2021-06-13T11:42:26+0100 HOST: raspberrypi Loss% Snt Last Avg Best Wrst StDev 1.|-- 192.168.1.254 0.0% 50 26.8 27.1 26.5 31.4 0.8 2.|-- somerouter.net 88.0% 50 392.0 390.4 362.1 596.7 1.2[/code] The results are reported as round-trip response times in milliseconds and the percentage of packet loss. If you see loss and/or latency like the above example, report it to your VPN provider or find another one. Read [url=https://www.linode.com/docs/networking/diagnostics/diagnosing-network-issues-with-mtr/]this[/url] for more on interpreting mtr results. Protip: free VPNs are frequently oversubscribed and usually not worth the trouble. -- OpenVPN is enabled but I am still blocked from country restricted websites. -- Remote hosts use a variety of methods to defeat VPNs, some more aggressively than others. Many VPN providers will advise you to configure custom DNS servers to mitigate [url=https://dnsleaktest.com/]DNS leaks[/url], which you can do from RaspAP's [b]DHCP > Advanced[/b] tab. Others have specific VPN nodes to use with popular streaming services. Several users have reported that Firefox's [url=https://support.mozilla.org/en-US/kb/firefox-dns-over-https]DNS-over-HTTPS (DoH)[/url] has created problems with their VPN, in effect creating a DNS leak from the browser that circumvents RaspAP's DNS settings. Be sure to disable this "feature" when using a VPN service. If you suspect network traffic is not being routed through tun0 (or any other interface) for some reason, you can monitor this directly from your RPi with [code=text,0,1]iftop[/code]: [code=text]sudo apt install iftop sudo iftop -i [interface][/code] -- Uploading my WireGuard config results in "MIME type not allowed". -- For security reasons, your OpenVPN or WireGuard [code=text,0,1].conf[/code] files must have a Linux MIME type of [code=text,0,1]text/plain[/code]. Windows ignores MIME types, relying instead on extensions. To avoid errors, be sure your file has a [code=text,0,1]text/plain[/code] MIME type embedded in it before uploading. Most OpenVPN and WireGuard service providers give you the option of downloading a file formatted for Linux. Alternatively, you may convert your Windows config file for use with Linux with [code=text,0,1]dos2unix[/code] or one of several online tools made for this purpose. -- I think my traffic isn't being routed through the WireGuard VPN. Can I debug this? -- There are several things you can do to troubleshoot this. First, with the WireGuard service active, verify your public IPv4 address and check the external link, as shown below: [img]https://user-images.githubusercontent.com/229399/147815548-a16ef105-230b-4e89-a4e6-69abba51b92a.png[/img] Next, you may check the WireGuard service status by executing [code=text,0,1]sudo systemctl status wg-quick@wg0.service[/code] from the shell, like so: [code=text]$ sudo systemctl status wg-quick@wg0.service ● wg-quick@wg0.service - WireGuard via wg-quick(8) for wg0 Loaded: loaded (/lib/systemd/system/wg-quick@.service; enabled; vendor preset: enabled) Active: active (exited) since Wed 2021-12-29 15:31:03 GMT; 1 day 18h ago Docs: man:wg-quick(8) man:wg(8) https://www.wireguard.com/ https://www.wireguard.com/quickstart/ https://git.zx2c4.com/wireguard-tools/about/src/man/wg-quick.8 https://git.zx2c4.com/wireguard-tools/about/src/man/wg.8 Main PID: 1450 (code=exited, status=0/SUCCESS) Tasks: 0 (limit: 1438) CPU: 0 CGroup: /system.slice/system-wg\x2dquick.slice/wg-quick@wg0.service[/code] You may also use RaspAP's built-in WireGuard logging facility. On the [b]WireGuard > Logging[/b] tab, enable the "Display WireGuard debug log" option and choose [b]Save settings[/b]. Check the log output in the tab and look for any errors. Tip The debug log facility queries the [code=text,0,1]systemd[/code] journal with a one-time execution of [code=text,0,1]journalctl --identifier wg-quick[/code]. If you want to update this log output, simply enable the option again. You may also execute this command directly from the shell, if you wish. Finally, you may check and verify the WireGuard config itself, including PostUp / PostDown rules, by executing [code=text,0,1]sudo cat /etc/wireguard/wg0.conf[/code]. As a last piece of advice, be sure to test more than one client device connection with your WireGuard-enabled AP. Some users have reported traffic not routing as expected with one device, while a different device behaves normally. Please note that RaspAP provides a front-end to the WireGuard service only. It has no way of validating your WireGuard configuration. For this reason, bug reports such as "WireGuard not working" won't be considered. -- How can I clear RaspAP's WireGuard log? -- WireGuard doesn't do any logging by default. The quasi-logging done by RaspAP executes [code=text,0,1]sudo journalctl --identifier wg-quick[/code]. The Linux journal is not something you usually clear by yourself, however you can use journalctl's self maintenance to retain only the past two days: [code=text]sudo journalctl --vacuum-time=2d[/code] See [code=text,0,1]man journalctl[/code] for more information. -- Why can't I access wireless mode 'N' (802.11n)? -- On the [b]Configure hotspot[/b] > [b]Security[/b] tab, be sure to select CCMP for the Encryption Type. Save the settings and restart the hotspot. The wireless mode should be reported on clients as 802.11b/g/n. [code=text]RaspAP: PHY Mode: 802.11n Channel: 1 Network Type: Infrastructure Security: WPA2 Personal Signal / Noise: -49 dBm / -86 dBm Transmit Rate: 73[/code] If using TKIP for encryption with WPA, you will be restricted to 54 Mb/s. This is because the IEEE 802.11n draft prohibits using high throughput with WEP or TKIP ciphers. -- How do I exclude NAT rules from IP traffic on localhost? -- RaspAP's [url=https://docs.raspap.com/quick/]Quick Installer[/url] configures network-address-translation (NAT) with iptables rules, so that the RPi can act as an internet gateway to multiple hosts on a local network with a single public IP address. This is done by rewriting the addresses of IP packets as they pass through the NAT system. Many access points, including RaspAP, use a combination of IP forwarding and masquerading to achieve this. In some cases, NAT rules applied to [code=text,0,1]localhost[/code] can interfere with other services running on an RPi. An example is the Plex Media Server, which has an API that listens on localhost. As of this writing, the Plex API has been built to not authenticate communication between service processes of the server. This can cause a failure to communicate with the Plex API or similar add-on services on your RPi. The solution is to add a NAT rule ahead of the rule RaspAP installs to not apply NAT to connections destined to 127.0.0.0/8: [code=text]$ sudo iptables -t nat -I POSTROUTING -d 127.0.0.0/8 -j ACCEPT[/code] The resulting iptables chain should look something like this: [code=text]$ sudo iptables -t nat -L -n -v Chain PREROUTING (policy ACCEPT 31 packets, 4810 bytes) pkts bytes target prot opt in out source destination Chain INPUT (policy ACCEPT 31 packets, 4810 bytes) pkts bytes target prot opt in out source destination Chain OUTPUT (policy ACCEPT 23 packets, 1338 bytes) pkts bytes target prot opt in out source destination Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 17 999 ACCEPT all -- * * 0.0.0.0/0 127.0.0.0/8 2422 158K MASQUERADE all -- * * 0.0.0.0/0 0.0.0.0/0[/code] Refer to [url=https://github.com/RaspAP/raspap-webgui/issues/333#issue-454352554]this issue[/url]. -- Why is the channel dropdown disabled on the Hotspot page? -- RaspAP is capable of detecting the frequencies (channels) supported by each of your device's wireless interfaces. If an interface is selected that is not capable of broadcasting on the 5 GHz band, the associated channels and the [b]Save settings[/b] button are disabled. Next to the [b]Wireless Mode[/b] selector, a tooltip will provide a brief explanation. [url=https://github.com/RaspAP/raspap-webgui/assets/229399/576531cd-fcf1-4377-9d51-3824ee498efb][Image][/url] In this case, selecting a compatible 2.4 GHz wireless mode will populate the list of available channels for that interface. Alternatively, select another interface or connect a 5 GHz capable external wireless adapter. RaspAP will automatically detect the adapter and add it to the list of available interfaces. -- Why is the maximum throughput of my 802.11n AP reduced by half? -- In order to achieve optimal throughput with 802.11n, the wireless stream must operate at a 40 MHz wide channel on the 2.4 GHz band. A 20 MHz channel will restrict you to 72 Mbps. Your [code=text,0,1]hostapd.conf[/code] might have the required settings, but this is no guarantee of a 40 MHz channel. In practice, this can be quite difficult due to interference on the 2.4 GHz band. There are many things that will cause an AP to fallback to 20 MHz. The most common reason is if an AP detects another wireless network within 40 MHz, i.e. two channels, of its own channel. For example, if an AP is set to channel 6, another network operating anywhere from channel 4 to 8 will trigger a fallback. hostapd will usually report a fallback like so: [code=text]20/40 MHz operation not permitted on channel pri=3 sec=7 based on overlapping BSSes[/code] For more information on optimizing 802.11n, refer to this [url=https://www.lmi.net/wp-content/uploads/Optimizing_802.11n.pdf]resource[/url]. Generally speaking, the 5 GHz band has substantially greater capacity due to more non-overlapping radio channels and less radio interference as compared to the 2.4 GHz band. -- Can I connect the WiFi client to a WEP network? -- Wired Equivalent Privacy (WEP) has been deprecated for quite awhile but old routers still exist in the wild. Not all routers accept hex passwords, but you can try converting an ASCII password using an online tool like [url=https://www.binaryhexconverter.com/ascii-text-to-hex-converter]this one[/url]. A valid WEP key should be 5 or 13 characters or a 10- or 26-digit hexadecimal value. Be sure the hex values are unpadded and there are no trailing spaces. For example, [code=text,0,1]52617370415069734772656174[/code] is a valid hex passphrase. Paste your converted hex value into RaspAP's WiFi client passphrase field and try connecting. If you're not able to connect with a hex passphrase, you can also try this alternate [url=https://wiki.netbsd.org/tutorials/how_to_use_wpa_supplicant/#index3h2]manual configuration method[/url]. -- Can I turn the hotspot on/off over SSH? -- Yes, RaspAP provides a front-end to several Linux [code=text,0,1]systemd[/code] services, including [code=text,0,1]hostapd[/code]. From the terminal, check the status of the [code=text,0,1]hostapd.service[/code] like so: [code=text]$ sudo systemctl status hostapd.service ● hostapd.service - Access point and authentication server for Wi-Fi and Ethernet Loaded: loaded (/lib/systemd/system/hostapd.service; enabled; vendor preset: enabled)[/code] Stop the service with [code=text,0,1]sudo systemctl stop hostapd.service[/code] and start it with [code=text,0,1]sudo systemctl start hostapd.service[/code]. If you're curious about which other services and Linux tools RaspAP controls for you, take a look at [url=https://github.com/RaspAP/raspap-webgui/blob/master/installers/raspap.sudoers][code=text,0,1]raspap.sudoers[/code][/url]. -- How do I upgrade RaspAP? -- Upgrading an existing install without changing your configuration is very straightforward. To upgrade to the [url=https://github.com/RaspAP/raspap-webgui/releases/latest]latest release[/url] version, simply run the [url=https://docs.raspap.com/quick/]Quick Installer[/url] with the [code=text,0,1]--upgrade[/code] option: [code=text]curl -sL https://install.raspap.com | bash -s -- --upgrade[/code] The installer upgrade is [i]idempotent[/i], meaning it can be repeated an arbitrary number of times and the result will be as if it had been done only once. If you choose this method, you're done! Confirm the upgrade by checking the release version on the [b]About[/b] page. If you want to install a specific version you can do so by referencing a tag: [code=text]sudo git fetch --tags sudo git checkout 2.5[/code] A tag is a pointer that isn't connected to the main development tree that git knows about. As a result, git will reply that you're in a 'detached HEAD' state. This isn't a big deal, it just means that you have a specific version of the code that isn't connected to the git tree. Alternatively, if you want the latest [i]bleeding edge[/i] commits from the master branch, use the following: [code=text]sudo git checkout -b master sudo git pull origin master[/code] If you've customized your installation by editing [code=text,0,1]config.php[/code], update the release version in this file: [code=text]sudo nano /var/www/html/includes/config.php[/code] Change the first line to the release version, save the file and exit. Note [code=text,0,1]RASPI_VERSION[/code] is only used on the About page; it does not affect any other functionality. [code=text]define('RASPI_VERSION', '2.8.9');[/code] Finally, give the lighttpd service a kick with: [code=text]sudo systemctl restart lighttpd.service[/code] Whichever method you choose (installer upgrade, specific release or latest updates), your RaspAP configuration won't be changed. -- Do I need the RaspAP service to run at boot? -- If you are using your RPi as a client on a WiFi network (also known as managed mode) and hosting an access point simultaneously, the [code=text,0,1]raspapd.service[/code] will ensure that your hotspot is active after a reboot. It does this by detecting WiFi client AP mode, adding the [code=text,0,1]uap0[/code] interface and starting up networking services in a specific order. If your RPi is configured with wired ethernet ([code=text,0,1]eth0[/code]) or you haven't experienced problems with the AP starting on boot, you can disable the RaspAP daemon like so: [code=text]sudo systemctl disable raspapd.service[/code] -- Can the Quick Installer accept the default options without prompting me? -- Yes, the [url=https://docs.raspap.com/quick/]Quick Installer[/url] has a non-interactive mode that lets you perform unattended setups. This mode assumes "yes" as an answer to all prompts. You can do an unattended install of RaspAP by appending the [code=text,0,1]--yes[/code] command-line option, like so: [code=text]curl -sL https://install.raspap.com | bash -s -- --yes[/code] The options [code=text,0,1]-y[/code] or [code=text,0,1]--assume-yes[/code] are also accepted and have the same result. -- How do I uninstall RaspAP? -- We have provided an uninstall script to remove RaspAP cleanly, and also restore any backups of your configuration that were created before RaspAP was installed. The uninstall script is located in [code=text,0,1]installers/uninstall.sh[/code]. To start the uninstaller, simply run the following from the project root folder (default location is [code=text,0,1]/var/www/html[/code]): [code=text]cd /var/www/html sudo installers/uninstall.sh[/code]
Prévisualisation
Prévisualisation
Nature de la modification (facultatif, 100 caractères max)
* Code de vérification
Combien font 4 + cinq ?
Valider
Valider
Défaut