question

Dave van Dongen avatar image
Dave van Dongen asked

Remote Console not working

I installed a CCGX in Ethiopia. It is connected to the router of the house via a fixed cable. Monitoring interval to VRM is 1 minutes and works flawlessly. But Remote Console doesn't work, both from my phone and my laptop and both on the local network or from outside access. When I am on the local network and I connect to the Remote Console of my CCGX back home in The Netherlands it works fine. So it seems the connection from "outside coming in" is working fine.
I tried most steps on this page (except the advanced steps), but no result:

https://www.victronenergy.com/live/vrm_portal:troubleshooting_ccgx_vrm_connectivity


(SOLVED: Also I inserted a 16Gb micro SD card, but the CCGX is not logging on the SD card. It recognises the card and tells me the available storage space, etc., but no records seem to be written to the card. Any ideas?)

CCGX Color Controlremote console
3 comments
2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

nigelfxs avatar image nigelfxs commented ·

The CCGX will typically be allocated a local-LAN IP Address by the Router. If you can log into the router to check this IP address - you can then try accessing the CCGX by typing this IP Address into you browser (from a PC connected on the local LAN).

You should see a response from the CCGX - either requesting a password or giving an access denied (if Remote access is disabled). This will help identify whether there is an issue with the allocation of the local IP address on the LAN (i.e. DHCP service) or some other issue (e.g. Firewall issue).

0 Likes 0 ·
Dave van Dongen avatar image Dave van Dongen nigelfxs commented ·

Thanks, very useful information, good thinking! I will try this!

0 Likes 0 ·
Dave van Dongen avatar image Dave van Dongen nigelfxs commented ·

Update: The CCGX is on DHCP and has an IP address that seems to remain pretty constant. (lease time of minimal 1,5 hour)
When on the local LAN I browse to this IP address, I get the login for the Remote Console and after logging in, the Remote Console works perfectly!
So the allocation of the local IP address does not seem to be an issue.
I am going to chekc the router configuration now...

0 Likes 0 ·
3 Answers
mvader (Victron Energy) avatar image
mvader (Victron Energy) answered ·

Hi all; an update: this was solved in Venus OS v2.30, released last May.


There is no longer any verification on IP Address.

1 comment
2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

Dave van Dongen avatar image Dave van Dongen commented ·

Thanks for the notice! I will try to upgrade the remote installation (tricky, because there is no Remote Console! ;-) ) and try again!

0 Likes 0 ·
wkirby avatar image
wkirby answered ·

Did you enable remote console in VRM from the CCGX?

It does not log to the SD card if it is logging to VRM. If you lost internet connection, it will start logging to SD card, when the internet connection return's then the contents of the SD will be drained into VRM.

3 comments
2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

Dave van Dongen avatar image Dave van Dongen commented ·

@WKirby Thanks for your answer! :-)

Regarding the SD card, I was under the impression that I could do logging to VRM and teh SD card both simultaneously. But OK, as long as I have connection, I can work with VRM and the SD card sits there in case the connection is lost for longer than 3 days at some moment.

Regarding the Remote Console: Yes, I enabled Remote Console. I set a password and rebooted the CCGX. Didn't work. I disabled the password and rebooted the CCGX. Didn't work. I tried all the basic steps mentioned on the web page above, but it doesn't work... :-(

0 Likes 0 ·
wkirby avatar image wkirby ♦♦ Dave van Dongen commented ·

I should have asked what CCGX version are your sites on?

0 Likes 0 ·
Dave van Dongen avatar image Dave van Dongen wkirby ♦♦ commented ·

Freshly installed, so the latest version: v2.22

0 Likes 0 ·
mvader (Victron Energy) avatar image
mvader (Victron Energy) answered ·

Hi, wrt not being able to login to the system; it sounds like you are running into the IP Address verification issue:

——-

IP Address verification

Remote Console on VRM checks the IP Address for security reasons.

In case all above does not help, it might be that your internet connection very frequently changes its IP-address. And/or that the internet provider routes the different data stream over different of its routers.

Both of which will make the IP verification fail and therefor makes Remote Console fail. To solve this problem, contact your internet provider and/or change to a different internet provider.

Note that it is not necessary for the CCGX to be addressable itself, and/or have a public IP address. Worded differently: traversing NAT translation is no problem.

——

From: https://www.victronenergy.com/live/vrm_portal:troubleshooting_ccgx_vrm_connectivity#ip_address_verification.

Solution is in the text; and I dont know of any other solution; other than ofcourse wait for us to fix the security in a different way (drop the IP Address verification). Doing so is planned for next year; but I dont have a date.

8 comments
2 |3000

Up to 8 attachments (including images) can be used with a maximum of 190.8 MiB each and 286.6 MiB total.

Dave van Dongen avatar image Dave van Dongen commented ·

Hi Matthijs, thanks for your answer. Maybe this is the problem. I understand that I cannot solve this, if this is the case. I will try again and see if I can get more information on the situation.I have one doubt with the above: Does IP address verification also apply when both the read-out device (phone/laptop) and the CCGX are on the same internal network/connected to the same household router? Or does the Remote Console traffic then still go through the connection with the outside world? Ok, I will do some more testing and post the results on this page.

0 Likes 0 ·
Dave van Dongen avatar image Dave van Dongen Dave van Dongen commented ·

Ah, yes, the Remote Console on the VRM website always goes through the outside connection, off course, duh. I found that the Remote Console does work on the LAN.

Further: the IP address of both the CCGX on the LAN and of the internet connection to the outside world actually seems to be stable and not to change. (or not very often, at least. Stable for the last couple of hours now and Remote Console still doesn't work.)

How can I test if the data goes over different routers? Any other tests that I can perform? Test for firewalls? Test if ports are blocked?

0 Likes 0 ·
mvader (Victron Energy) avatar image mvader (Victron Energy) ♦♦ Dave van Dongen commented ·

Hi, I briefly looked for your site in ethiopia; and can confirm that all works well (no ports are blocked and-so-forth). So it must be the ipaddress issue.


No more checking will help; sorry.

0 Likes 0 ·
Dave van Dongen avatar image Dave van Dongen mvader (Victron Energy) ♦♦ commented ·

Hi Matthijs, thanks for checking.
I spend the whole afternoon on a remote desktop session to try everything I could from a laptop that was in the LAN.
I tried the advanced (HTPPS) stuff from the webpage mentioned above. It didn't respond like it should, actually, so I was thinking that could be the problem. But that stuff is more VRM related and not so much Remote Console related, as far as I can see.
Anyway, if it is the IP address issue, I am screwed, I guess, because there is nothing I can do about it. :-(
I will anxiously wait for the fix...

0 Likes 0 ·
Dave van Dongen avatar image Dave van Dongen Dave van Dongen commented ·

I just checked the IP adresses, BTW. It has been a month since I last checked, but the IP adresses are exactly the same, didn't change! Both the IP adress of the CCGX on the internal network and the IP adress of the house connection in the wide world are, after a month, still exactly the same.

It is written: "In case all above does not help, it might be that your internet connection very frequently changes its IP-address."
But this is certainly not the case, because the IP adresses are very stable.

It continues: "And/or that the internet provider routes the different data stream over different of its routers."
So, can I now conclude that this is the case?

"Both of which will make the IP verification fail and therefor makes Remote Console fail. To solve this problem, contact your internet provider and/or change to a different internet provider."

I could now ask the internet provider to ask if this routing issue can be worked around?

0 Likes 0 ·
markus avatar image markus ♦♦ Dave van Dongen commented ·

just a workaround, that could maybe help to avoid changing provider. Depending on the local routers capabilities, it could be possible to establish a Site to Site VPN connection to a router in e.g. Europe and route the VRM traffic over this router and use its IP address for VRM related traffic only.


0 Likes 0 ·
markus avatar image markus ♦♦ markus ♦♦ commented ·

Or just a e.g. SSLVPN "dialup" connection to the local router and use the LAN console, remotely.

0 Likes 0 ·
Dave van Dongen avatar image Dave van Dongen markus ♦♦ commented ·

Thanks, I will investigate if this is possible! (I am not too big on the IT stuff, but let's see how far I get.)

0 Likes 0 ·