topic Re: HTTPS access issue at 3500 in Wireless

HTTPS access issue at 3500

Leftz — Fri, 29 Jul 2022 16:07:41 GMT

Hi We have wlc 3500. Please see the below. HTTPS is enabled, but why we cannot access via https? Thank you very much.

Re: HTTPS access issue at 3500

Mark Elsen — Fri, 29 Jul 2022 16:09:26 GMT

- What error are you getting in the browser ?

Re: HTTPS access issue at 3500

Leftz — Fri, 29 Jul 2022 16:14:55 GMT

Thanks marce1000 for your reply. Please see the below. and http has no problem.

Re: HTTPS access issue at 3500

MHM Cisco World — Fri, 29 Jul 2022 16:20:12 GMT

Change the browser and try again

Re: HTTPS access issue at 3500

Mark Elsen — Fri, 29 Jul 2022 16:20:43 GMT

- Make sure no ACL's are in place on the controller that restrict certain components from administrative access , for that when using http check/verify the the WLC GUI and choose Security > Access Control Lists

Re: HTTPS access issue at 3500

Leftz — Fri, 29 Jul 2022 16:28:34 GMT

Other browser has the same issue

The WLC has some ACL, but the management interface that we are using for access does not associate with any ACL.

Re: HTTPS access issue at 3500

MHM Cisco World — Fri, 29 Jul 2022 16:34:03 GMT

Cpu acl ? Share it here if yes.

Re: HTTPS access issue at 3500

Mark Elsen — Fri, 29 Jul 2022 16:38:58 GMT

- For sanity check remove/clear all acl's (temporarily)

Re: HTTPS access issue at 3500

Leftz — Fri, 29 Jul 2022 16:48:15 GMT

No cpu acl

and all ACLs are related with ISE and Guest wifi. Other wlc has the same ACL as this one.

Re: HTTPS access issue at 3500

Mark Elsen — Fri, 29 Jul 2022 17:18:14 GMT

- Check logs on the controller when https access is tried 2) Make sure no intermediate firewall blocks https access to the controller , 3) Fetch the (https) page with wget ,( https://linuxize.com/post/wget-command-examples/ ) , check if you can find additional errors.

Re: HTTPS access issue at 3500

MHM Cisco World — Fri, 29 Jul 2022 21:58:15 GMT

then this is not effect access to WLC.
in PC share the output of following
telnet <WLC3500> port <443>
let see if there is any FW block the port in way to WLC.

Re: HTTPS access issue at 3500

Rasika Nayanajith — Fri, 29 Jul 2022 22:07:15 GMT

Are you trying to access it while connecting to wireless or from wired LAN? By default access via wirelessly is blocked.

As long as you have IP reachability from your LAN to WLC, you should be able to access from wired connected PC

HTH
Rasika

Re: HTTPS access issue at 3500

MHM Cisco World — Fri, 29 Jul 2022 22:08:28 GMT

Thanks for this point.

Re: HTTPS access issue at 3500

MHM Cisco World — Fri, 29 Jul 2022 22:25:57 GMT

https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_0110010.pdf
management via Wireless feature must be enable.
check this point

Re: HTTPS access issue at 3500

Rich R — Mon, 01 Aug 2022 10:16:58 GMT

Have you tried Deleting and Regenerating the self signed certificate? (followed by reload)

Or re-installing the public certificate (followed by reload) if you're using a public cert?

If still not working get a packet capture of the connection to see why it's closing the connection.

Re: HTTPS access issue at 3500

Leftz — Thu, 04 Aug 2022 17:27:16 GMT

Thank you all for your reply! Sorry for the delay

@Rich R we are going to try it. but the concern is it would cause some additional issue?

@MHM Cisco World regarding "telnet <WLC3500> port <443>" we got the below message:

"The remote system refused the connection."

but we can access it by "ssh <WLC3500> port <443>

Re: HTTPS access issue at 3500

MHM Cisco World — Thu, 04 Aug 2022 17:39:39 GMT

https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_0110010.pdf

Check this link,

If you access via wireless you need to enable it in wlc.

Re: HTTPS access issue at 3500

Leftz — Thu, 04 Aug 2022 18:26:04 GMT

You are talking about accessing wlc via wireless. what i want to is to access wlc via wire and port443

Re: HTTPS access issue at 3500

MHM Cisco World — Thu, 04 Aug 2022 19:18:12 GMT

are you use management IP or service port IP?

Re: HTTPS access issue at 3500

Leftz — Fri, 05 Aug 2022 14:04:22 GMT

management ip