无线讨论区中的主题 Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

huanghuang60262 — Fri, 21 Aug 2020 12:11:00 GMT

思科

AIR-CAP3702E-H-K9

刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆，
ap#show version
Cisco IOS Software, C3700 Software (AP3G2-K9W7-M), Version 15.3(3)JPJ3a, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2020 by Cisco Systems, Inc.
Compiled Mon 25-May-20 13:09 by prod_rel_team
ROM: Bootstrap program is C3700 boot loader
BOOTLDR: C3700 Boot Loader (AP3G2-BOOT-M) LoaderVersion 15.2(4)JB, RELEASE SOFTWARE (fc1)
ap uptime is 3 hours, 48 minutes
System returned to ROM by power-on
System image file is "flash:/ap3g2-k9w7-mx.153-3.JPJ3a/ap3g2-k9w7-xx.153-3.JPJ3a"
Last reload reason:
This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

cisco AIR-SAP3702E-H-K9 (PowerPC) processor (revision A0) with 376814K/134656K bytes of memory.
Processor board ID FGL2107A7WU
PowerPC CPU at 800Mhz, revision number 0x2151
Last reset from power-on
1 Gigabit Ethernet interface
2 802.11 Radios

32K bytes of flash-simulated non-volatile configuration memory.
Base ethernet MAC Address: F8:0B:CB:1B:46:00
Part Number : 73-15397-01
PCB Serial Number : FOC21036F24
Top Assembly Part Number : 068-05055-07
Top Assembly Serial Number : FGL2107A7WU
Top Revision Number : A0
Product/Model Number : AIR-CAP3702E-H-K9

Configuration register is 0xF
ap#show run
Building configuration...
Current configuration : 1717 bytes
!
! Last configuration change at 03:24:36 UTC Mon Mar 1 1993
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
!
logging rate-limit console 9
enable secret 5 $1$I.QC$l05UrlQwjQITtjM3JOxJ.1
!
no aaa new-model
no ip source-route
no ip cef
!
!
!
!
dot11 pause-time 100
dot11 syslog
!
dot11 ssid MySSID
authentication open
guest-mode
!
!
!
no ipv6 cef
!
!
username Cisco password 7 13261E010803
!
!
bridge irb
!
!
!
interface Dot11Radio0
no ip address
shutdown
antenna gain 0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1
no ip address
shutdown
antenna gain 0
peakdetect
no dfs band block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
ip address 192.168.0.199 255.255.255.0
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
mac-address f80b.cb1b.4600
ip address 192.168.0.200 255.255.255.0
ipv6 address dhcp
ipv6 address autoconfig
ipv6 enable
!
ip default-gateway 192.168.0.1
ip forward-protocol nd
no ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
transport input all
!
end
求大神有哪里设置错误，有什么办法解决吗？

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

Wubin2010 — Tue, 25 Aug 2020 00:34:46 GMT

no ip http server改ip http server

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

YilinChen — Tue, 25 Aug 2020 05:40:12 GMT

no ip http server
no ip http secure-server
默认配置是关闭WEB服务的，需要开启

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

weiJames15759 — Mon, 31 Aug 2020 03:05:40 GMT

问题解决了吗？？

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

sufee — Tue, 01 Sep 2020 02:02:58 GMT

Cisco#configure terminal
Cisco(config)#ip http authentication enable
Cisco(config)#ip http authentication local
Cisco(config)#ip http server
Cisco(config)#end
默认关闭了HTTP服务。

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

huanghuang60262 — Sat, 05 Sep 2020 02:38:36 GMT

Wubin2010 发表于 2020-8-25 08:34
no ip http server改ip http server

ap#show run
Building configuration...
Current configuration : 3244 bytes
!
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
!
logging rate-limit console 9
enable secret 5 $1$I.QC$l05UrlQwjQITtjM3JOxJ.1
!
no aaa new-model
no ip source-route
no ip cef
!
!
!
!
dot11 pause-time 100
dot11 syslog
!
!
no ipv6 cef
!
crypto pki trustpoint TP-self-signed-3407562240
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3407562240
revocation-check none
rsakeypair TP-self-signed-3407562240
!
!
crypto pki certificate chain TP-self-signed-3407562240
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33343037 35363232 3430301E 170D3933 30333031 30303132
30395A17 0D333030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 34303735
36323234 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100CE4B 89BAE9D5 78F3BFE0 E1FCF6A4 55991BFF 24DEC8DE 116C81D1 9433E392
181C30F0 B9A51171 86085DD8 650204AE 6C6A41B2 92092599 43527080 628F707B
F59E79B5 6A2263D8 39CEB02C 856CD7BA 334C226E 77FC6790 9F4BB0BA E0539EB0
EFAD6F1D 4B320515 1F694E60 A5A08FBF 51B3F46D F24B80B1 6C263832 41A15E10
C2310203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 148B7064 30517C38 85E2A54A F6D54328 1767006B 61301D06
03551D0E 04160414 8B706430 517C3885 E2A54AF6 D5432817 67006B61 300D0609
2A864886 F70D0101 05050003 8181000E E753E4CF 6724B92D AFF7DE11 5591C90D
66484807 03C9D43C ED1A67A2 61D4D68A 15FD0FB1 1AE74EB9 7053BB6B 1DD887DF
1B6C4C3F A29ACEE2 1D9085AF 9F7304D0 7BE0DCDB 20C4D8DE 44EB2D28 642E6565
5A5A53E8 B0201AF3 795A7FAF 9CA65AD3 48347C2E 33FA1A8D B37E129C EC01484B
15578EEC FC9C23A9 AF044593 60A749
quit
username Cisco password 7 13261E010803
!
!
bridge irb
!
!
!
interface Dot11Radio0
no ip address
shutdown
antenna gain 0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1
no ip address
shutdown
antenna gain 0
peakdetect
no dfs band block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
mac-address f80b.cb1b.4600
ip address 192.168.0.199 255.255.255.0
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
mac-address f80b.cb1b.4600
ip address 192.168.0.200 255.255.255.0
ipv6 address dhcp
ipv6 address autoconfig
ipv6 enable
!
ip default-gateway 192.168.0.1
ip forward-protocol nd
no ip http server
ip http authentication local
ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
transport input all
!
end
目前还不行，看来我要学的还很多。
谢谢您呀

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

huanghuang60262 — Sat, 05 Sep 2020 02:39:56 GMT

YilinChen 发表于 2020-8-25 13:40
no ip http server
no ip http secure-server

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

huanghuang60262 — Sat, 05 Sep 2020 02:41:19 GMT

weiJames15759 发表于 2020-8-31 11:05
问题解决了吗？？

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

huanghuang60262 — Sat, 05 Sep 2020 03:03:42 GMT

sufee 发表于 2020-9-1 10:02
Cisco#configure terminal
Cisco(config)#ip http authentication enable
Cisco(config)#ip http authent ...

ap#show run
Building configuration...
Current configuration : 3300 bytes
!
! Last configuration change at 00:29:14 UTC Mon Mar 1 1993
version 15.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap
!
!
logging rate-limit console 9
enable secret 5 $1$I.QC$l05UrlQwjQITtjM3JOxJ.1
!
no aaa new-model
no ip source-route
no ip cef
!
!
!
!
dot11 pause-time 100
dot11 syslog
!
!
no ipv6 cef
!
crypto pki trustpoint TP-self-signed-3407562240
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-3407562240
revocation-check none
rsakeypair TP-self-signed-3407562240
!
!
crypto pki certificate chain TP-self-signed-3407562240
certificate self-signed 01
3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33343037 35363232 3430301E 170D3933 30333031 30303132
30395A17 0D333030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 34303735
36323234 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100CE4B 89BAE9D5 78F3BFE0 E1FCF6A4 55991BFF 24DEC8DE 116C81D1 9433E392
181C30F0 B9A51171 86085DD8 650204AE 6C6A41B2 92092599 43527080 628F707B
F59E79B5 6A2263D8 39CEB02C 856CD7BA 334C226E 77FC6790 9F4BB0BA E0539EB0
EFAD6F1D 4B320515 1F694E60 A5A08FBF 51B3F46D F24B80B1 6C263832 41A15E10
C2310203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
551D2304 18301680 148B7064 30517C38 85E2A54A F6D54328 1767006B 61301D06
03551D0E 04160414 8B706430 517C3885 E2A54AF6 D5432817 67006B61 300D0609
2A864886 F70D0101 05050003 8181000E E753E4CF 6724B92D AFF7DE11 5591C90D
66484807 03C9D43C ED1A67A2 61D4D68A 15FD0FB1 1AE74EB9 7053BB6B 1DD887DF
1B6C4C3F A29ACEE2 1D9085AF 9F7304D0 7BE0DCDB 20C4D8DE 44EB2D28 642E6565
5A5A53E8 B0201AF3 795A7FAF 9CA65AD3 48347C2E 33FA1A8D B37E129C EC01484B
15578EEC FC9C23A9 AF044593 60A749
quit
username Cisco password 7 13261E010803
!
!
bridge irb
!
!
!
interface Dot11Radio0
no ip address
shutdown
antenna gain 0
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface Dot11Radio1
no ip address
shutdown
antenna gain 0
peakdetect
no dfs band block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 spanning-disabled
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
!
interface GigabitEthernet0
mac-address f80b.cb1b.4600
ip address 192.168.0.199 255.255.255.0
duplex auto
speed auto
bridge-group 1
bridge-group 1 spanning-disabled
no bridge-group 1 source-learning
!
interface BVI1
mac-address f80b.cb1b.4600
ip address 192.168.0.200 255.255.255.0
ipv6 address dhcp
ipv6 address autoconfig
ipv6 enable
!
ip default-gateway 192.168.0.1
ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
!
!
bridge 1 route ip
!
!
!
line con 0
line vty 0 4
login local
transport input all
!
end
目前还不行，我还要学习更多才行。
谢谢您呀

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

huanghuang60262 — Sat, 05 Sep 2020 03:04:52 GMT

weiJames15759 发表于 2020-8-31 11:05
问题解决了吗？？

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

huanghuang60262 — Sat, 05 Sep 2020 03:06:51 GMT

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

huanghuang60262 — Sat, 05 Sep 2020 03:08:54 GMT

Wubin2010 发表于 2020-8-25 08:34
no ip http server改ip http server

对不起点的时候碰到四颗星那里，在点就点不了了。

Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

JIZHOU7497715 — Wed, 11 Nov 2020 13:02:27 GMT

你是不是登录用户权限不够啊?
需要一个LEVEL 15的用户才能登陆的吧

回复： Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

huanghuang60262 — Sat, 17 Apr 2021 03:51:26 GMT

谢谢了，不折腾了，把它出给回刷它的人了。

回复： Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

sufee — Thu, 05 Oct 2023 15:19:14 GMT

刷了JPQ版本，登录默认cisco反复登录弹窗

回复： Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

linbojue666 — Thu, 11 Dec 2025 08:22:46 GMT

no ip http server改ip http server

回复： Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

Rockyw — Sat, 13 Dec 2025 14:04:38 GMT

根据您提供的配置信息，AP 无法通过网页登录的主要原因很可能是 HTTP/HTTPS 服务被禁用。

问题分析

在您的配置中，有以下关键两行：

no ip http server
no ip http secure-server

no ip http server：禁用了普通的 HTTP Web 服务。
no ip http secure-server：禁用了 HTTPS Web 服务。

这两条命令直接导致您无法通过浏览器（无论是 HTTP 还是 HTTPS）访问 AP 的管理界面。

解决方案

您需要通过 Console 口或 Telnet/SSH 连接到 AP 的命令行界面，然后执行以下命令来重新启用 Web 服务。

步骤 1：进入全局配置模式

在 AP 的特权执行模式（ap#）下，输入：

configure terminal

步骤 2：启用 HTTP 和 HTTPS 服务器

依次输入以下命令：

ip http server
ip http secure-server

解释：

ip http server：启用 HTTP 服务（端口 80）。
ip http secure-server：启用 HTTPS 服务（端口 443）。出于安全考虑，建议主要使用 HTTPS。

步骤 3：（可选但推荐）创建访问控制列表

为了安全起见，建议限制只有特定的管理网络可以访问 Web 界面。例如，假设您的管理电脑 IP 是 192.168.0.100。

创建一个 ACL：
```
ip access-list standard WEB-ACCESS
permit 192.168.0.100
deny any
exit
```
(这条 ACL 只允许 IP 地址 192.168.0.100访问，拒绝其他所有地址。您可以根据需要修改这个 IP 或网段，如 permit 192.168.0.0 0.0.0.255)

将 ACL 应用到 HTTP 和 HTTPS 服务上：

ip http access-class WEB-ACCESS
ip http secure-server access-class WEB-ACCESS

步骤 4：保存配置

输入以下命令，将当前运行的配置保存到启动配置中，这样 AP 重启后设置也不会丢失：

write memory

或

copy running-config startup-config

步骤 5：测试登录

完成以上步骤后，请尝试在浏览器中再次访问 AP 的 IP 地址：

HTTPS: https://192.168.0.199(推荐)
HTTP: http://192.168.0.199

您应该能看到登录页面了。使用您在配置中创建的用户名 Cisco和对应的密码进行登录。

其他需要注意的配置点

IP 地址冲突？：您的配置中，物理接口 GigabitEthernet0的 IP 是 192.168.0.199，而桥接虚拟接口 BVI1的 IP 是 192.168.0.200。在桥接组 (bridge-group 1) 中，BVI1接口的 IP 才是 AP 真正的管理 IP。您应该使用 192.168.0.200来管理 AP。请确保 GigabitEthernet0的 IP 不是必须的，或者考虑将其移除以避免混淆。
- 可以尝试用这个命令移除 GigabitEthernet0的 IP：interface GigabitEthernet0-> no ip address。
默认网关：您的 ip default-gateway设置为 192.168.0.1，请确保这个地址是正确的，并且 AP 能与之通信，这对于跨网段管理是必要的。

总结

最直接、最可能解决问题的操作就是启用 HTTP/HTTPS 服务。请优先尝试步骤 2 和步骤 4。如果问题依旧，请再检查 IP 地址和网络连通性。希望这能帮助您解决问题！

回复： Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

Rockyw — Sat, 13 Dec 2025 14:11:25 GMT

看到您已经启用了 HTTP 和 HTTPS 服务，但仍然无法访问。根据您的新配置，我发现了几个关键问题需要解决：

主要问题分析

1. IP 地址配置冲突

您的配置中存在两个管理 IP：

GigabitEthernet0: 192.168.0.199
BVI1: 192.168.0.200

在桥接模式下，AP 的实际管理接口是 BVI1。您应该使用 192.168.0.200来访问 Web 界面。

2. 证书问题

虽然配置了自签名证书，但可能存在证书不匹配或生成问题。

解决方案

步骤 1：简化 IP 配置

进入配置模式，清理 IP 地址配置：

configure terminal

! 移除 GigabitEthernet0 的 IP 地址，只保留 BVI1
interface GigabitEthernet0
no ip address
exit

! 确保 BVI1 配置正确
interface BVI1
ip address 192.168.0.200 255.255.255.0
exit

步骤 2：检查网络连通性

在 AP 上测试网络连接：

! 测试到网关的连通性
ping 192.168.0.1

! 测试从您的电脑到 AP 的连通性
! 在您的电脑上执行：
ping 192.168.0.200

步骤 3：重新生成证书（如需要）

! 删除现有证书配置
crypto pki certificate chain TP-self-signed-3407562240
no certificate self-signed 01
exit

! 重新生成证书
crypto pki enroll TP-self-signed-3407562240

步骤 4：增强 HTTP 配置

! 设置 HTTP 超时时间
ip http timeout-policy idle 60 life 86400 requests 100

! 确保认证方式正确
ip http authentication local

步骤 5：检查防火墙/安全设置

在您的电脑上：

暂时禁用防火墙和杀毒软件测试
尝试不同的浏览器（Chrome、Firefox、Edge）
清除浏览器缓存和 Cookie

访问测试

现在尝试以下方式访问：

HTTPS: https://192.168.0.200
HTTP: http://192.168.0.200

如果仍然无法访问，请检查：

1. 查看 HTTP 服务状态

show ip http server status
show ip http secure-server status

2. 检查端口监听

show tcp brief all | include 80|443

3. 查看日志信息

show logging

4. 备选方案：重置配置

如果以上方法都无效，考虑备份当前配置后重置：

! 备份当前配置
show run > tftp://您的TFTP服务器IP/ap-config-backup.txt

! 重置为出厂设置
write erase
reload

重置后需要重新配置基本参数，但这是解决顽固问题的有效方法。 请先尝试步骤 1 和步骤 2，然后测试访问。

回复： Aironet 3700e 刷了ap3g2-k9w7-tar.153-3.JPJ3a.tar网页不能登陆

sufee — Fri, 02 Jan 2026 10:25:19 GMT

大神！应该是正确解决方法，可以一试，最新JQ5的胖固件谁可以分享一下谢谢！！