topic Re: 9800-CL webgui login issue in Wireless

9800-CL webgui login issue

Dimban — Mon, 05 Jul 2021 20:22:17 GMT

Hi guys!

Recently i have deployed 9800-CL from OVA version C9800-CL-universalk9.16.12.04a. Everything is great except one thing. When i login to web gui with day0 admin account evertyhing works well. When login to web gui with created (via CLI or WebGUI) another user i can see only blank page with backward button on top.

SSH access works great with any user.

I tried to use ACS as tacacs AAA server as well.And again SSH access works well, but only day0 user allowed to access to WebGUI, although debug tacacs authentication tells me authentication PASSED not only for day0 user (for created via CLI or WebGUI as well) but then there is a message l"Login un-seccessfull from host ...."

Is there any limitation of how many users can access webgui?

BTW i have updated system up to Cisco IOS Software [Amsterdam], C9800-CL Software (C9800-CL-K9_IOSXE), Version 17.3.1, RELEASE SOFTWARE (fc5) still no luck

Re: 9800-CL webgui login issue

Rasika Nayanajith — Fri, 12 Mar 2021 18:28:50 GMT

Did that new user get privilege 15 access? If not try that

HTH

Rasika

Re: 9800-CL webgui login issue

Dimban — Fri, 12 Mar 2021 20:01:34 GMT

Sure, all users have 15th privilege level

Re: 9800-CL webgui login issue

Rich R — Mon, 15 Mar 2021 12:56:47 GMT

Are you trying to use aaa authorization?

See https://community.cisco.com/t5/wireless/how-to-setup-aaa-to-define-gui-role-in-cisco-wireless-controller/m-p/4292546#M226417

Re: 9800-CL webgui login issue

Dimban — Mon, 15 Mar 2021 15:59:09 GMT

Thank you very much. It was the thing. When i removed those strings everything starts to work well.

aaa authorization commands 1 default group ACS if-authenticated
aaa authorization commands 15 default group ACS if-authenticated
aaa accounting send stop-record authentication failure

Re: 9800-CL webgui login issue

Rich R — Mon, 15 Mar 2021 16:59:24 GMT

Good 🙂