topic Re: Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credent in Wireless

Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credentials

prcant — Mon, 23 Sep 2024 12:52:39 GMT

I recently configured a Cisco Catalyst 9800. After setting up the device via the console, I enabled the web server and configured the management interface along with user credentials. SSH access is working perfectly, but when trying to log into the web interface, I receive an "Invalid Credentials" error.

Steps:

Configured the management interface with an IP address.
Enabled HTTP/HTTPS server.
Created a user with privilege 15.
Enabled SSH access, which works without issues.

What could be causing the web interface to reject the credentials while SSH works fine? Are there additional configurations required specifically for the web interface? Any guidance would be greatly appreciated!

Re: Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credent

MHM Cisco World — Mon, 23 Sep 2024 12:58:33 GMT

Can I see the wlc config

MHM

Re: Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credent

prcant — Mon, 23 Sep 2024 13:59:16 GMT

what exactly do you want to have?

Re: Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credent

MHM Cisco World — Mon, 23 Sep 2024 14:06:36 GMT

Show run | in http

This part friend

MHM

Re: Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credent

MHM Cisco World — Mon, 23 Sep 2024 14:09:23 GMT

https://www.wiresandwi.fi/blog/cisco-wlc-9800-base-initial-configuration-cli

Check this there is some command related to http is missing

MHM

Re: Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credent

prcant — Mon, 23 Sep 2024 14:10:52 GMT

WLC#Show run | in http
ip http server
ip http secure-server
destination transport-method http
WLC#

Re: Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credent

prcant — Mon, 23 Sep 2024 15:04:38 GMT

WLC#Show run | in http
logging discriminator FILTER msg-body drops Configured programmatically by process SEP_webui_wsma_http
webauth-http-enable
ip http server
ip http secure-server
destination transport-method http
WLC#

I keep having the same problem

Re: Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credent

MHM Cisco World — Mon, 23 Sep 2024 15:06:14 GMT

ip http authentication local

MHM

Re: Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credent

prcant — Mon, 23 Sep 2024 15:36:21 GMT

CORP-WLC01#Show run | in http
logging discriminator FILTER msg-body drops Configured programmatically by process SEP_webui_wsma_http
webauth-http-enable
ip http server
ip http access-class ipv4 HTTPSXX_ACC
ip http authentication local
ip http secure-server
ip http client source-interface Vlan999
destination transport-method http
CORP-WLC01#

the access list in the ACLs was missing

Re: Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credent

MHM Cisco World — Mon, 23 Sep 2024 15:38:34 GMT

Now gui is working

Glad issue solve

Have a nice day

MHM

Re: Catalyst 9800: SSH Works, Web Interface Fails with Invalid Credent

jagan.chowdam — Mon, 23 Sep 2024 16:00:29 GMT

Validate the WLC config with WLC Config Analyzer https://cway.cisco.com/tools/WirelessAnalyzer/ and go through the critical Advisories and fix them.

Jagan Chowdam

/**Pls rate useful responses**/