RV320 - web gui will not load on windows 11 but will load on ios 18.1

[hartbarger]

The rv320 has been stable for several years on 1.5.1.13 FW.  I wanted to add a MAC2IP binding and could not get to login screen.  Did same from iPad and login and web gui loaded.  Something has changed in a recent windows update to cause the issue.  Its onlyRouting, Other Routers been 2 or 3 months since my last login on windows. Any suggestions?

[Flavio Miranda]

@hartbarger 

 One change that I notice recently related to browsers is that even though you try to access HTTP they will actually use HTTPS. You need to explicity change the configuration if you want to use HTTP

[hartbarger]

Thanks.  I tried to force it from Windows but maybe it was still using https.   I’ll use iOS browser to try and configure  RV320 to use plain text for web gui.  

[Flavio Miranda]

Use the iOS and configure the router to accept HTTPS.

[hartbarger]

Thanks.  It was already configured with HTTPS enabled.  I disabled HTTPS while in  iOS browser and then cleared all browser history on windows.  I am now getting web ui  on all  my Windows based browsers using HTTP. 

[Flavio Miranda]

Wow, great.  Then the problem was the opposite, the HTTPS was preventing the access. This can be related to certificate or Java config on the broswer.

 On the Java config you may configure to trust your routers IP address. This could be a fix.

But, it is fixed anyway.

[hartbarger]

Thank you! The self signed certificate on the router had expired so I attempted to generate a new one using generator on the Rv320.  I never got it right and had the router locked up to point I had to access it via console as I recall so needless to still running with expired as primary cert.   Is it likely windows got update that “blocks” it now? Would have been last couple months.  

is there a better instruction on creating and installing the self signed certificates including how to back it off if something is wrong?

[Flavio Miranda]

"Is it likely windows got update that “blocks” it now? Would have been last couple months. "

 I would expect windows to send you a warning that the site is not secure and asking you to continue or leave the site.  But, if you got some error while trying to access, I would consider this to be more like a java problem.

 "
is there a better instruction on creating and installing the self signed certificates including how to back it off if something is wrong?"

Take a look on this link. It would be a good idea to use some valid certicate instead self signed. you can try let´s encrupet which is free.

https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/smb5463-manage-certificates-on-the-rv34x-series-router.html

https://letsencrypt.org/

[hartbarger]

Thanks for great details.  It doesn’t give any error but  it just looks like it hung trying to connect and eventually times out. I’ve don’t recall that I installed a new version of Java runtime.  Is that what you’re thinking?

I’m clearly a beginner at certificate creation.  On first read of let’s encrypt instruction, it’s clear to me that I don’t understand the concepts of certificates.  Much more to do.  

[Flavio Miranda]

On windows machine you can use the seach and type Java. You´ll get into a configuration utility like this. This is in Portuguese but you can get to the point. There will be a Site exception list down below where you can add you router´s IP address

Certificate is not that complicate actually. You need to create a CSR file on the router and you can export this CSR file to Let´s Encrypt so that they can sign the CSR file and give you the certificate.

 The certificate is then installed on the router. When your browser try to access the router using HTTPS the certificate will be presented and the browser will not refuse as the Let´s Encrypt is well know Certificate authority.

 However, chances are they ask you for a domain name which is not free. So, most of time people dont use valid certifice because of it.

[hartbarger]

Thank you,  @Flavio Miranda ! you've been very helpful and patient.    The router GUI loads so much faster without https -- the RV320 is old but works great so going to drive it until it dies - which I though had happened LOL.  Do you know if Cisco monitors for this type of issue and releases FW for EOL products so they will at least continue to run?

Listing the IP address in the Java did not impact ability to connect to router so it feels like something windows tightened up in last couple months.  I'll do some google and copilot searches.

I've generated a CSR from within the RV320 but (so sorry) I can't locate where to upload it in an attempt creating the certificate.  One more hint - please.   I in fact own a domain but registration company certificates are like $US 200 per year.  That may be useful in getting the cert based on what you indicated.  Only real downside appears that the certificates expire every 90 days.

[Flavio Miranda]

@hartbarger 

 Cisco does not relase software for EOL devices.

If you have a domain, that´s great.

According to the csico manual, if you intend to move the process to a Certificate Authority like Let´s Encrypt, you need to generate the Certified Signing Request which is also the CSR.

Certificate name can be anything that make sense to you. The Common Name is very important and mst match exactly your domain.

Once you generated the CSR you should be able to export it.  Export in .PEM format.

[balaji.bandi]

Many days Chrome and IE keep changing, try Firefox and check.

[hartbarger]

Thanks.  I tried Chrome, Mozilla Firefox, and Edge (including IE compatibility mode). Given that all of them have same issue then it feels like Windows or some code library they share.  

[balaji.bandi]

download palemoon(browser) and test it