topic Re: 9800 WLC when browsing: "The connection for this site is not in Wireless

9800 WLC when browsing: "The connection for this site is not secure"

tdennehy — Wed, 22 Jan 2025 21:52:00 GMT

This is a lab box, on a bench with a flat 192.168.1.x network and g0 is connected. Not connected to the Internet. Can ping g0 from local subnet. When we try to browse to it, we get "The connection for this site is not secure". This actually worked six months or so ago. Not sure what changed, but it sure sounds like a date somewhere, but cannot find anything.

I followed Scott's advice on this link to no avail:

CISCO 9800 wreless controller not getting the http or https access giving ERR_SSL_PROTOCOL_ERROR - Cisco Community

Any ideas? I'm stumped.

Re: 9800 WLC when browsing: "The connection for this site is not

MHM Cisco World — Wed, 22 Jan 2025 21:54:53 GMT

You can access but this message appear or you can not log at all?

İf yoh can access this message is normal,

If you can not access then try other browsers or other PC

MHM

Re: 9800 WLC when browsing: "The connection for this site is not

Flavio Miranda — Wed, 22 Jan 2025 22:02:37 GMT

@tdennehy

Recently we noticed some changes on the browser behavior where it will use HTTPS even though you try to use HTTP. And this can explain your problem.

If you try to connected to the WLC using HTTPS, it is expected this error message because the browser will not trust the self-signed certificate presented by WLC during the SSL handshake.

Depending on the browser you use, you can disable this behavior and force the browser to actually use HTTP.

https://client.01link.net/knowledgebase/124/How-to-EnableorDisable-the-automatic-redirect-to-HTTPS-in-Chrome.html

Re: 9800 WLC when browsing: "The connection for this site is not

tdennehy — Wed, 22 Jan 2025 22:36:26 GMT

I followed that link, configured Chrome. I could browse to a lab 3504 on the same subnet, but when I try to get to the 9800, I get this:

This site can’t provide a secure connection
192.168.1.250 sent an invalid response.

* Try running Windows Network Diagnostics.

ERR_SSL_PROTOCOL_ERROR

Re: 9800 WLC when browsing: "The connection for this site is not

MHM Cisco World — Wed, 22 Jan 2025 22:38:49 GMT

BugZero | Cisco BugID CSCwb45089 - 9800 WLC HTTPS access is broken after upgrade to 1...

MHM

Re: 9800 WLC when browsing: "The connection for this site is not

Flavio Miranda — Wed, 22 Jan 2025 23:07:36 GMT

@tdennehy

I believe your problem is the same as the one on this thread.

https://community.cisco.com/t5/wireless/cisco-9800-wreless-controller-not-getting-the-http-or-https/td-p/3988305/page/1

Re: 9800 WLC when browsing: "The connection for this site is not

tdennehy — Thu, 23 Jan 2025 00:08:26 GMT

I tried Scott's recommendation but it did not work.

Re: 9800 WLC when browsing: "The connection for this site is not

Flavio Miranda — Thu, 23 Jan 2025 00:14:39 GMT

Consider moving the WLC to a different version. After all, that was an workaround and the main reason was a bug.

Re: 9800 WLC when browsing: "The connection for this site is not

Rich R — Thu, 23 Jan 2025 14:38:37 GMT

What software version is the WLC running?
Have tried rebooting the controller?

Re: 9800 WLC when browsing: "The connection for this site is not

tdennehy — Thu, 23 Jan 2025 16:30:22 GMT

c9800_Pod_10#sho ver
Cisco IOS XE Software, Version 17.09.03
Cisco IOS Software [Cupertino], C9800 Software (C9800_IOSXE-K9), Version 17.9.3, RELEASE SOFTWARE (fc6)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2023 by Cisco Systems, Inc.
Compiled Tue 14-Mar-23 18:11 by mcpre

Rebooted. No change. Very frustrating.

Re: 9800 WLC when browsing: "The connection for this site is not

Rich R — Thu, 23 Jan 2025 16:41:13 GMT

- Update the software as per TAC recommended link below.
- Check the WLC config using Config Analyzer (link below)
- Get a packet capture on client and on WLC to understand why it's not working.

Re: 9800 WLC when browsing: "The connection for this site is not

tdennehy — Thu, 23 Jan 2025 17:16:26 GMT

Thanks Rich. Its working now. You are the man!!!

Re: 9800 WLC when browsing: "The connection for this site is not

vishalbhandari — Thu, 23 Jan 2025 17:27:13 GMT

@tdennehy It seems like the issue is related to an SSL certificate expiration or mismatch on your Cisco 9800 wireless controller. Since the error mentions "ERR_SSL_PROTOCOL_ERROR" and the connection being "not secure," it’s likely that the controller's certificate is either expired or no longer trusted by your browser.

Here are a few steps to troubleshoot and resolve this:

Check the System Date and Time: Ensure the date and time on the controller are correct. An incorrect system date can cause SSL certificate issues.
Inspect the Certificate: Try accessing the controller using HTTPS and click on the certificate details in your browser. Check if the certificate is expired or invalid.
Regenerate or Re-upload Certificates: If the certificate is expired, you can either regenerate a new self-signed certificate or upload a valid one (e.g., from a trusted CA).
Fallback to HTTP: If HTTPS access is not critical for your lab setup, you can enable HTTP temporarily for access.
Browser Security Settings: Modern browsers are stricter with outdated or self-signed certificates. Try accessing the controller using an older browser or adjust security settings temporarily.

Re: 9800 WLC when browsing: "The connection for this site is not

MHM Cisco World — Thu, 23 Jan 2025 17:28:56 GMT

Sorry but it bug and solution is only upgrade.

He dont want to do anything else.

MHM