OpenWISP Not Accessible Using My Server IP

[alyssondiaz]

Hello All,

Anyone who can help me figure out the issue and give me a solution?
OpenWISP is accessible via http://localhost but not with http://192.168.190.134/admin.

I am using Nginx and Ansible, my Ubuntu server is running in VMware.

[nemesifier]

Nginx and Django need to be aware that they need to listen on that IP.

Try using the openwisp2_allowed_hosts variable (see Role Variables).

I am not 100% sure IP addresses are allowed, if that's not the case you can use a local DNS entry that you can add to /etc/hosts or a private hostname which is recognized by the local DHCP server, eg: openwisp.lan.

[alyssondiaz]

Hi @nemesifier,

Thank you for the suggestion.
Could you help me find the issue here?
My setup is a MAC-based Authentication (MBA), I have an Ubuntu VM running on my VMware Workstation.
Cisco switch 3850 binds my VM and Cisco WLC 9800 altogether.

uas@openwisp:~$ curl -vvv -k -X POST https://192.168.190.136/api/v1/freeradius/authorize/
-H "Content-Type: application/json"
-H "Authorization: Token x9mmet9s6fiHUWJLenmAj6cgERLRFZvl"
-d '{"User-Name": "testuser", "User-Password": "testpassword"}'
Note: Unnecessary use of -X or --request, POST is already inferred.

• Trying 192.168.190.136:443...
• Connected to 192.168.190.136 (192.168.190.136) port 443
• ALPN: curl offers h2,http/1.1
• TLSv1.3 (OUT), TLS handshake, Client hello (1):
• TLSv1.3 (IN), TLS handshake, Server hello (2):
• TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8):
• TLSv1.3 (IN), TLS handshake, Certificate (11):
• TLSv1.3 (IN), TLS handshake, CERT verify (15):
• TLSv1.3 (IN), TLS handshake, Finished (20):
• TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1):
• TLSv1.3 (OUT), TLS handshake, Finished (20):
• SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 / X25519 / RSASSA-PSS
• ALPN: server accepted http/1.1
• Server certificate:
• subject: C=US; ST=California ; L=San Francisco; O=IT dep.
  ; CN=192.168.190.136
• start date: Jun 25 08:48:23 2025 GMT
• expire date: Jun 23 08:48:23 2035 GMT
• issuer: C=US; ST=California ; L=San Francisco; O=IT dep.
  ; CN=192.168.190.136
• SSL certificate verify result: self-signed certificate (18), continuing anyway.
• Certificate level 0: Public key type RSA (2048/112 Bits/secBits), signed using sha256WithRSAEncryption
• using HTTP/1.x

POST /api/v1/freeradius/authorize/ HTTP/1.1
Host: 192.168.190.136
User-Agent: curl/8.5.0
Accept: /
Content-Type: application/json
Authorization: Token x9mmet9s6fiHUWJLenmAj6cgERLRFZvl
Content-Length: 58

• TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
• TLSv1.3 (IN), TLS handshake, Newsession Ticket (4):
• old SSL session ID is stale, removing
  < HTTP/1.1 400 Bad Request
  < Server: nginx
  < Date: Thu, 31 Jul 2025 21:14:02 GMT
  < Content-Type: application/json
  < Content-Length: 26
  < Connection: keep-alive
  < Vary: Accept
  < Allow: POST, OPTIONS
  < X-Frame-Options: DENY
  < X-Content-Type-Options: nosniff
  < Referrer-Policy: same-origin
  < Cross-Origin-Opener-Policy: same-origin
  < X-XSS-Protection: 1; mode=block
  < X-Content-Type-Options: nosniff
  < Referrer-Policy: same-site
  < Content-Security-Policy: default-src http: https: data: blob: 'unsafe-inline'; script-src 'unsafe-eval' https: 'unsafe-inline' 'self'; frame-ancestors 'self'; connect-src https://127.0.0.1 wss: 'self'; worker-src https://127.0.0.1 blob: 'self';
  < Permissions-Policy: interest-cohort=()
  < Strict-Transport-Security: max-age=31536000
  <
• Connection #0 to host 192.168.190.136 left intact
  {"detail":"Invalid token"}uas@openwisp:~$

Here's my rest file:
rest {
fail_on_error = no
debug = yes

connect_uri = "https://192.168.190.136"
shared_secret = "x9mmet9s6fiHUWJLenmAj6cgERLRFZvl"

authorize {
    uri = "${..connect_uri}/api/v1/freeradius/authorize/"
    method = 'post'
    body = 'json'
    data = 'json_radius_request'
    headers {
        "Content-Type" = "application/json"
        "Authorization" = "Token x9mmet9s6fiHUWJLenmAj6cgERLRFZvl"
    }
    fail = 1
}

accounting {
    uri = "${..connect_uri}/api/v1/freeradius/accounting/"
    method = 'post'
    body = 'json'
    data = 'json_radius_request'
    headers {
        "Content-Type" = "application/json"
    }
}

post_auth {
    uri = "${..connect_uri}/api/v1/freeradius/postauth/"
    method = 'post'
    body = 'json'
    data = 'json_radius_request'
    headers {
        "Content-Type" = "application/json"
    }
}

post_auth_type fail {
    uri = "${..connect_uri}/api/v1/freeradius/postauth/"
    method = 'post'
    body = 'json'
    data = 'json_radius_request'
    headers {
        "Content-Type" = "application/json"
    }
}

}