topic Re: WLC lost WEB and CLI after enabling FIPs in Wireless

WLC lost WEB and CLI after enabling FIPs

Mike_ATT_NY — Mon, 05 Jul 2021 18:51:22 GMT

I lost HTTP/HTTPS/CLI on my WLC after enabling FIPs. I can login, however with the console. I also lost all of my wireless profiles. Luckily, I'm testing in the lab.

Re: WLC lost WEB and CLI after enabling FIPs

Mike_ATT_NY — Fri, 13 Mar 2020 17:53:07 GMT

I also lost all the wireless profiles... luckily I'm in the lab..

Re: WLC lost WEB and CLI after enabling FIPs

Scott Fella — Fri, 13 Mar 2020 18:56:01 GMT

You did read up on the requirements for access when fips is enabled? I’m assuming you need to enable fips for government or you just testing?

https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/cisco_wlc_security.html#concept_7E605B4A99C746C5BA3F050FDA812C86

Re: WLC lost WEB and CLI after enabling FIPs

Mike_ATT_NY — Fri, 13 Mar 2020 19:28:06 GMT

I did read that document. It mentioned flushing out the old certificate & etc.. however, I was looking for some help to see if anyone has gone through this before.

Re: WLC lost WEB and CLI after enabling FIPs

Scott Fella — Sat, 14 Mar 2020 05:29:01 GMT

Did you create a certificate after you enabled fips?

Re: WLC lost WEB and CLI after enabling FIPs

Ambuj M — Sat, 14 Mar 2020 22:08:32 GMT

I did configure FIPS and CC compliance, did not run into this issue you are referring to.

In addition to the document mentioned by Scott I also followed this document from Cisco.

At the time i was using 5520 with 8.5.

https://www.niap-ccevs.org/MMO/Product/st_vid10931-agd.pdf

Re: WLC lost WEB and CLI after enabling FIPs

Mike_ATT_NY — Thu, 26 Mar 2020 13:01:37 GMT

I did generate the cert.

Here is the HTTPS error -> Error code: SSL_ERROR_NO_CYPHER_OVERLAP

The Putty error -> Couldn't agree a key exchange algorithm (available ecdh-sha2 & etc)

I was able to clear cert/SSL state on IE and I get a login there, but login fails. I have removed FIPS, & etc. and I regain access.