WebUI not available

[tdk1069]

Hi all, Fairly new to PVE but already have one node. Got some new donated hardware and trying to install 7.4-3

Installer runs fine, everything installs, reboots gets to logon box but I cannot get to the webui.

I can ping and ssh to the new node fine from all my devices including my existing pve node (I was planning to cluster and migrate guests over) but it fails due to no connection which isn't surprising when I can't get to the ui.
From what I have seen on the forum posts here is some info

root@spudmox:~# cat /etc/network/interfaces # network interface settings; autogenerated # Please do NOT modify this file directly, unless you know what # you're doing. # # If you want to manage parts of the network configuration manually, # please utilize the 'source' or 'source-directory' directives to do # so. # PVE will preserve these directives, but will NOT read its network # configuration from sourced files, so do not attempt to move any of # the PVE managed interfaces into external files! auto lo iface lo inet loopback iface eno2 inet manual auto vmbr0 iface vmbr0 inet static address 192.168.1.219/16 gateway 192.168.1.1 bridge-ports eno2 bridge-stp off bridge-fd 0 iface wlo1 inet manual root@spudmox:~# ss -lnpt | grep 8006 LISTEN 0 4096 *:8006 *:* users:(("pveproxy worker",pid=1229,fd=6),("pveproxy worker",pid=1228,fd=6),("pveproxy worker",pid=1227,fd=6),("pveproxy",pid=1226,fd=6)) root@spudmox:~# curl -k https://192.168.1.219:8006/ | grep title % Total % Received % Xferd Average Speed Time Time Time Current Dload Upload Total Spent Left Speed 100 2360 100 2360 0 0 288k 0 --:--:-- --:--:-- --:--:-- 288k <title>spudmox - Proxmox Virtual Environment</title> root@spudmox:~# cat /etc/hosts 127.0.0.1 localhost.localdomain localhost 192.168.1.219 spudmox.local spudmox # The following lines are desirable for IPv6 capable hosts ::1 ip6-localhost ip6-loopback fe00::0 ip6-localnet ff00::0 ip6-mcastprefix ff02::1 ip6-allnodes ff02::2 ip6-allrouters ff02::3 ip6-allhosts

What I did notice is odd is I installed tailscale on the node so I could carry on tinkering from work. and the UI is available via the tailscale ip !

I origionally tried to set it up on 192.168.0.220/16 as I'm splitting my network out slowly, but that didn't work so reinstalled it on 192.168.1.219 to be in the "normal" network. I have other services on 192.168.0.* which I can access fine, and on that subnet I could still ssh/ping no problem.

As the ui is available on the tailscale ip I'm assuming services etc are all OK.

Hope someone has some ideas

Thanks

 

[Moayad]

Hello,

Thank you for the outputs!

Have you checked if there is a firewall on port 8006 on the new node? Can you nmap the PVE IP on port 8006 (nmap 192.168.1.219 -p 8006 -Pn -T4).

Did you see anything interesting in the syslog during you try to browse the new PVE node?

Can you also check from tcpdump or wireshark during browse the PVE node?

EDIT: What says the output of (curl -k https://192.168.1.219:8006 -s | grep title) but from remote machine (not locally)

 

[tdk1069]

Not sure how to check the firewall, it was straight from the download iso so standard ? If you could let me know how to check I certainly will.

nmap and curl from my existing node.
root@proxmox:~# nmap 192.168.1.219 -p 8006 -Pn -T4 Starting Nmap 7.80 ( https://nmap.org ) at 2023-06-02 09:44 BST Nmap scan report for 192.168.1.219 Host is up (0.0020s latency). PORT STATE SERVICE 8006/tcp open wpl-analytics MAC Address: 6C:2B:59:FB:41:E4 (Dell) Nmap done: 1 IP address (1 host up) scanned in 0.15 seconds root@proxmox:~# curl -k https://192.168.1.219:8006 -s | grep title

the curl times out. I see nothing in the syslog when trying to browse

root@spudmox:~# tcpdump -i vmbr0 port 8006
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on vmbr0, link-type EN10MB (Ethernet), snapshot length 262144 bytes


tcpdump running on new node while trying to connect from another device on the network.
root@spudmox:~# tcpdump -i vmbr0 port 8006 tcpdump: verbose output suppressed, use -v[v]... for full protocol decode listening on vmbr0, link-type EN10MB (Ethernet), snapshot length 262144 bytes 09:47:52.439916 IP veeam-recovery-iso.36618 > spudmox.local.8006: Flags [S], seq 4074403417, win 64240, options [mss 1460,sackOK,TS val 2168495437 ecr 0,nop,wscale 7], length 0 09:47:52.439942 IP spudmox.local.8006 > veeam-recovery-iso.36618: Flags [S.], seq 1935317503, ack 4074403418, win 65160, options [mss 1460,sackOK,TS val 757224059 ecr 2168495437,nop,wscale 7], length 0 09:47:52.439947 IP veeam-recovery-iso.36630 > spudmox.local.8006: Flags [S], seq 3686610384, win 64240, options [mss 1460,sackOK,TS val 2168495437 ecr 0,nop,wscale 7], length 0 09:47:52.439951 IP spudmox.local.8006 > veeam-recovery-iso.36630: Flags [S.], seq 1869611491, ack 3686610385, win 65160, options [mss 1460,sackOK,TS val 757224059 ecr 2168495437,nop,wscale 7], length 0 09:47:52.439953 IP veeam-recovery-iso.36634 > spudmox.local.8006: Flags [S], seq 2257177446, win 64240, options [mss 1460,sackOK,TS val 2168495437 ecr 0,nop,wscale 7], length 0

Thanks for the reply Hope it means more to you !

 

[tdk1069]

Ok... So this was a fun one !

This ended up being my ISP router... When the new node was physically plugged directly into it (Which nothing else on my network is as I only use it to feed my network but it happened to be close to a spare plug/monitor etc so used it to build it) Then I could ping, ssh etc, but not webui on 8006... Physically moved the new node to a regular hard wire socket via the rest of my infrastructure and it all worked normally (Currently migrating guests over)

No idea why the isp router would block 8006, there's no firewall options on it (Just port forwarding and I'm not exposing that to the wonderful wide web.

Not sure it will ever help anyone else, but wanted to post an update so this can be closed/ignored/save someones time replying later

Regards