User Tools

Site Tools


doc:howto:firstlogin

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
doc:howto:firstlogin [2012/11/12 01:38]
uvray313
doc:howto:firstlogin [2016/10/18 16:48] (current)
JW0914 [Command-line Interface(CLI)] Added info for CC enabling ssh without a password at first boot
Line 1: Line 1:
 +====== OpenWrt – First Login ======
  
 +| {{:​meta:​icons:​tango:​dialog-information.png?​nolink}} | There is no preset password in OpenWrt! You need to set one at your first login per ssh, telnet or the WebUI. |
 +
 +|{{:​meta:​icons:​tango:​48px-dialog-warning.svg.png?​nolink&​24}}| **Pre-built trunk images do not come with any web interface or GUI**. You will only be able to login using the CLI, unless you install one yourself: [[doc:​howto:​luci.essentials|LuCI Essentials]] ​ |
 +
 +|{{:​meta:​icons:​tango:​48px-dialog-warning.svg.png?​nolink&​24}}| **Telnet was removed from trunk by 46809. In a newer trunk build, only ssh is available. Note : As of 30/04/2016, Telnet is still available in OpenWrt 15.05.1** ​ |
 +
 +===== Command-line Interface(CLI) =====
 +    * Via Telnet: Only if you are using Chaos Calmer 15.05.1 (or earlier) and you have NOT already SET UP a password. After setting a password for the root account, telnet connection is disabled and you must use a ssh connection for CLI.
 +    * Via SSH: Use [[wp>​PuTTY]] , [[wp>​WinSCP]] or [[https://​wiki.gnome.org/​Apps/​HotSSH|HotSSH]]. For OpenWrt builds //prior// to 15.05.1, SSH connection is only available after setting a password for the root account.
 +
 +===== HTTP (using your web browser) =====
 +    * If there is no WebUI (Web user interface) in the image, you can swiftly install one following this HowTo: **[[LuCI]]**
 +    * For other WebUIs have a look at the [[webinterface.overview]]
 +//Please note: (HTTP**S** access is only available after [[firstlogin|First Login]])//
 +
 +===== OpenWrt System Default =====
 +{{page>​doc:​openwrt_system_default_features&​noheader&​nofooter&​noeditbtn}}
 +
 +===== Login with telnet =====
 +  * login to your router via **''​telnet''​**:<​code>​
 +telnet> open 192.168.1.1 23
 +Trying 192.168.1.1...
 +Connected to 192.168.1.1.
 +Escape character is '​^]'​.
 + === IMPORTANT ============================
 +  Use '​passwd'​ to set your login password
 +  this will disable telnet and enable SSH
 + ​------------------------------------------
 +
 +
 +BusyBox v1.23.2 (2016-01-02 10:46:55 CET) built-in shell (ash)
 +
 +  _______ ​                    ​________ ​       __
 + ​| ​      ​|.-----.-----.-----.| ​ |  |  |.----.| ​ |_
 + ​| ​  ​- ​  ​|| ​ _  |  -__|     ​|| ​ |  |  ||   ​_|| ​  _|
 + ​|_______|| ​  ​__|_____|__|__||________||__| ​ |____|
 +          |__| W I R E L E S S   F R E E D O M
 + ​-----------------------------------------------------
 + CHAOS CALMER (15.05.1, r48532)
 + ​-----------------------------------------------------
 +  * 1 1/2 oz Gin            Shake with a glassful
 +  * 1/4 oz Triple Sec       of broken ice and pour
 +  * 3/4 oz Lime Juice       ​unstrained into a goblet.
 +  * 1 1/2 oz Orange Juice
 +  * 1 tsp. Grenadine Syrup
 + ​-----------------------------------------------------
 +root@OpenWrt:/# ​
 +</​code>​
 +
 +Note : DO NOT USE the command line "​telnet 192.168.1.1"​ because this connection does not work, you will have this message "​Encryption could not be enabled."​ and next telnet connection is closed by OpenWrt device.
 +
 +  * type **''​passwd''​** into the prompt. You will be prompted to set a new password for the user root:<​code>​
 +root@OpenWrt:/#​ passwd
 +Changing password for root
 +New password:
 +Retype password:
 +Password for root changed by root
 +root@OpenWrt:/#​
 +</​code>​
 +  * please **choose** a <color red> __**//​secure password//​**__</​color>,​ (consult e.g [[http://​xkcd.com/​936/​|password strength]]) else the passwd tool will say to you "Bad password: too weak" after the line "New password: "
 +  * after you set a password the telnet daemon will be disabled, type ''​exit''​ into the prompt
 +  * without reboot, SSH is now available; so is HTTP//S// if the WebUI ([[doc:​howto:​luci.essentials|LuCI]]) is installed with it's [[wp>​Transport Layer Security|TLS]]-modules
 +  * login again with ''​ssh root@192.168.1.1''​ or use **//​[[doc/​techref/​signature.authentication]]//​**
 +  * proceed with [[basic.config]]
 +
 +
 +===== Login to WebUI =====
 +==== LuCI ====
 +=== First connection to Luci to set up password for root account by GUI ===
 +
 +Open your browser and connect to the router at its default address (usually 192.168.1.1). Login using username ''​root''​ with an ''​empty password''​.
 +
 +Make sure your browser accepts (session) cookies. LuCI login fails if password is set and session cookies cannot be accessed.
 +
 +Then click on the left in the top bar on //​Administration//,​ then go to //System// in the bar underneath.
 +A page to change the password is displayed.
 +
 +{{:​doc:​howto:​admin_paswword:​admin_password-luci.png|}}
 +
 +Write your desired password into the field //​Password//​ and repeat it in the field //​Confirmation//​. Finally click on //Save & Apply//.
 +  * <color #​c80000>​This is the **ADMIN** password for the router, **NOT** your //WiFi// password to connect devices.</​color>​
 +    * <color red>This password should be a //**minimum 15 characters**//​ & contain //**at least**//:</​color>​
 +      * <color #​646464>​**//​two//​ uppercase letters**</​color>​
 +      * <color #​646464>​**//​two//​ lowercase letters**</​color>​
 +      * <color #​646464>​**//​two//​ numbers**</​color>​
 +      * <color #​646464>​**//​two//​ symbols**</​color>​
 +
 +Your password is now set.
 +
 +=== First connection to Luci after set up password for root account by CLI ===
 +
 +Open your browser and connect to the router at its default address (usually http://​192.168.1.1 or https://​192.168.1.1). Login using username ''​root''​ and with the password that you have previously set up by CLI (follow the steps in "Login with telnet"​ part in this web page).
 +
 +==== Gargoyle ====
 +
 +Open your browser and connect to the Web Interface at its default address (192.168.1.1) the username is //​**admin**//​ OR //​**root**//​ and the password is //​**password**//​.
 +You can ssh to the router at the default address (192.168.1.1) the username is //​**root**//​ the password is //​**password**//​. ​
 +Unlike OpenWrt the telnet port is not open.
 +
 +===== Login Problems =====
 +If you encounter problems with login, i.d. you can't login, this may very well be a problem with your firewall settings in Linux or Windows. If you have any firewalls, you may disable them. Also, once you set a password in OpenWrt, telnet will no longer functions (see above).
 +
 +==== No SSH access after Setting Password ====
 +Try again after a minute or two. On the first bootup OpenWrt will be busy setting up the filesystem and generating SSH keys; the SSH server won't start until after the keys have been generated.
 +
 +==== Telnet connection immediately closes ====
 +Once you've set a password new telnet connections are immediately terminated. You must SSH at that point.