Firewall Troubleshooting

How to allow RoninDojo access to new network

• Do you have custom network of VLANs?
• Need to change locations or networks?

When you set up a RoninDojo, the firewall rules are made for the network your device lives on. You can only log into the user interface or use SSH if you’re’ on the same network as the RoninDojo.

If cannot log into any user interface then the firewall may be blocking you. If you moved a RoninDojo to a new network, or you are using a custom network with VLANs, then make sure the firewall rules are updated accordingly.

You can use RoninCLI Firewall menu to allow a new IP Range for SSH access, delete a specific rule, check Firewall status, and more.

Add IP range: System → Next Page → Networking → Firewall → Add IP Range for SSH

Add single IP: System → Next Page → Networking → Firewall → Add Specific IP for SSH

I’m locked out of SSH, RoninUI, and RoninCLI

If you are locked out from both RoninUI and RoninCLI, then you may need to plug in an HDMI screen and USB keyboard into the device to login manually.

Go to the Firewall Menu in the RoninCLI. Once there, check the status of the firewall to make sure the rule matches your IP address range or specific IP address.

System → Next Page → Networking → Firewall → Status

If manual logins with HDMI screen and keyboard show wrong password, you have not created a password using RoninUI.

If you still cannot access RoninUI to create a password, you may need to reflash RoninOS, and start the install process again. This time using the computer you use to access RoninUI on the same network as the RoninDojo.

All login attempts are not responding

If RoninUI, RoninCLI, and HDMI screen plus USB keyboard manual login attemps are all failing, you probably need to check the Hardware Troubleshoot page. This usually indicates it’s a hardware issue.

My remote host identification has changed

The Remote Host Identification Has Changed error message can be resolved by typing the following command:

ssh-keygen -R [NodeIpAddress]

Make sure to remove the brackets and only enter your actual device local IP address, for example:

ssh-keygen -R 192.168.100.3

The most common reasons for this message are:

1. Reinstallation of RoninOS: If the operating system is reinstalled, it generates a new SSH key. As a result, when you try to SSH into the device, the SSH client detects different host identification information.

2. IP address change: If the IP address of the device is changed, the SSH client may show the “REMOTE HOST IDENTIFICATION HAS CHANGED” message. Your router may occasionally issue a new IP address to devices on the network, depending on its DHCP lease time.

How to access multiple nodes

If you are running multiple RoninDojo nodes on your local network, then each device’s RoninUI local instance can be accessed by adding a number which corresponds to the order in which the nodes were set up.

Here is an example with 3 nodes running on the same network:

ronindojo.local
ronindojo-2.local
ronindojo-3.local

Can’t Access RoninUI Using Tor Browser

If you cannot access RoninUI using Tor Browser, then try restarting and checking the status.

Access the RoninCLI menus, exit to the command line, and run:

sudo systemctl restart tor

After restarting you can check the status and try to access RoninUI using Tor Browser again:

sudo systemctl status tor