set "Client IP block level" at flashing
Moderators: grovkillen, Stuntteam, TD-er
set "Client IP block level" at flashing
Hello everybody,
I'm making my first steps with ESPEasy now and find it very easy to handle, great piece of software. But there's one thing I cannot manage, hope someone can help me with this.
I've got 2 networks at work (VLAN 1 and VLAN 2) with 2 different network ranges. VLAN 1 is reserved for PCs, VLAN 2 should be used by IoT = ESPEasy. The problem now is that after flasing ESPEasy to the ESP8266 it gets an IP from VLAN 2 range, which is correct. Unfortunately I cannot access the ESP8266 from VLAN 1 network as ESPEasy is blocking by default other network ranges (called "Client IP block level" in the settings).
I couldn't find a way to set this parameter at flashing by using serialcommands.txt as there seems to be no command for my needs (AccessInfo command only shows the actual range).
Any hint?
Thank you very much!!!!
Lemon
I'm making my first steps with ESPEasy now and find it very easy to handle, great piece of software. But there's one thing I cannot manage, hope someone can help me with this.
I've got 2 networks at work (VLAN 1 and VLAN 2) with 2 different network ranges. VLAN 1 is reserved for PCs, VLAN 2 should be used by IoT = ESPEasy. The problem now is that after flasing ESPEasy to the ESP8266 it gets an IP from VLAN 2 range, which is correct. Unfortunately I cannot access the ESP8266 from VLAN 1 network as ESPEasy is blocking by default other network ranges (called "Client IP block level" in the settings).
I couldn't find a way to set this parameter at flashing by using serialcommands.txt as there seems to be no command for my needs (AccessInfo command only shows the actual range).
Any hint?
Thank you very much!!!!
Lemon
Re: set "Client IP block level" at flashing
I login with my phone just to change that value, than back to desktop.
I requested the change to default ALL some time ago but no luck.
I requested the change to default ALL some time ago but no luck.
-D
Re: set "Client IP block level" at flashing
I never used serial commands but i guess there is no option since ClearAccessBlock (https://espeasy.readthedocs.io/en/lates ... mmand.html) seems to lift this block ony for the current session.... and after restarting the device it is probably gone.
So i see two solutions.
1. build your own binary
2. flash them with the credentials of vlan1...use the webinterface to lift the accessblock and change to vlan2...hit submit
So i see two solutions.
1. build your own binary
2. flash them with the credentials of vlan1...use the webinterface to lift the accessblock and change to vlan2...hit submit
Last edited by chromo23 on 05 Oct 2022, 12:21, edited 2 times in total.
Re: set "Client IP block level" at flashing
On the config page, see the Client IP filtering
Set that to allow all.
Set that to allow all.
Re: set "Client IP block level" at flashing
The idea to temporary lift it, is so you may still need to enter credentials (when set) to permanently change this.chromo23 wrote: ↑05 Oct 2022, 12:20 I never used serial commands but i guess there is no option since ClearAccessBlock (https://espeasy.readthedocs.io/en/lates ... mmand.html) seems to lift this block ony for the current session.... and after restarting the device it is probably gone.
So i see two solutions.
1. build your own binary
2. flash them with the credentials of vlan1...use the webinterface to lift the accessblock ... and change to vlan2
But when you can access it, you can change it and save the settings.
But I guess you can either temporary connect the node to a different subnet, or connect to this subnet using your phone (or some other WiFi device) and configure this setting.
Re: set "Client IP block level" at flashing
3. i can build a binary for you with the accessblock disabled 

Re: set "Client IP block level" at flashing
There is a reason this block is enabled by default....
But I can see why -in this case- it might be useful to have it disabled.
On the other hand, you could also configure one node and then image the entire flash and use that to flash new nodes.
This way you always have the same starting point, like WiFi credentials set, some default controller configured, timezone set, etc.
But I can see why -in this case- it might be useful to have it disabled.
On the other hand, you could also configure one node and then image the entire flash and use that to flash new nodes.
This way you always have the same starting point, like WiFi credentials set, some default controller configured, timezone set, etc.
Re: set "Client IP block level" at flashing
I think what happens here is, that the devices are flashed and get immediately their credentials ofer serial commands...so after a reboot @lemon is locked out and cannot change a thing...
4. disable vlan2 and all devices enter the AP-mode where you can access them
Last edited by chromo23 on 05 Oct 2022, 12:29, edited 1 time in total.
Re: set "Client IP block level" at flashing
5.TD-er wrote: ↑05 Oct 2022, 12:27 There is a reason this block is enabled by default....
But I can see why -in this case- it might be useful to have it disabled.
On the other hand, you could also configure one node and then image the entire flash and use that to flash new nodes.
This way you always have the same starting point, like WiFi credentials set, some default controller configured, timezone set, etc.

Edit:
6.
Code: Select all
or connect to this subnet using your phone (or some other WiFi device) and configure this setting.
Re: set "Client IP block level" at flashing
OK, a 7th option...
Start a hotspot on your mobile with some fallback credentials (or the same credentials as your VLAN2 network) and let the ESP connect to your phone.
This way you can access it on the IP which your phone gives out to the ESP (use some tool like Network Analyzer on your phone to do an IP scan).
Not sure if we can come up with 3 more ways to get to 10 options
Start a hotspot on your mobile with some fallback credentials (or the same credentials as your VLAN2 network) and let the ESP connect to your phone.
This way you can access it on the IP which your phone gives out to the ESP (use some tool like Network Analyzer on your phone to do an IP scan).
Not sure if we can come up with 3 more ways to get to 10 options

Who is online
Users browsing this forum: Bing [Bot] and 22 guests