cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6012
Views
1
Helpful
9
Replies

Cannot access Web UI

Bregan1229
Level 1
Level 1

i currently have a Cisco 9200 catalyst switch that I am working on for my current employer and I am unable to access the Web UI when i type in the IP address assigned to the switch. Every time i type the IP address into a web browser, the switch reads with a "private key not found" error. I have no ip http server, ip http authentication local, and ip http secure-server configured. Any assistance in this matter would be greatly appreciated. 

1 Accepted Solution

Accepted Solutions

If you enable http and try with http://x.x.x.x

 Does it work?

View solution in original post

9 Replies 9

Hello,

not sure what your entire configuration looks like, make sure it is something like below (IP addresses are arbitrary):

username admin privilege 15 secret password123
!
interface vlan 1
ip address 192.168.1.10 255.255.255.0
no shutdown
!
ip http server
ip http secure-server
ip http authentication local
!
ip default-gateway 192.168.1.1

Bregan1229
Level 1
Level 1

My configs looks like the one you provided, I will attach them below (I will also blank out some text lines for security purposes)

username ********** privilege 15 secret 9 $9$0FFgky2ZirAFtk$3kqWZzIgc1a/FR1XnKPmJ44GzpqYVW/6CtVyNYMCF0g

!
interface Vlan1
no ip address
!
interface Vlan100
ip address X.X.X.X 255.255.255.0
no ip proxy-arp
ip pim sparse-dense-mode
!
no ip http server
ip http authentication local
ip http secure-server

!
ip default-gateway X.X.X.X

Hi

 Are you using https://x.x.x.x  right?

Yes that is correct. 

If you enable http and try with http://x.x.x.x

 Does it work?

I disabled https and it works with http. When I try to use https, i get an error message that reads "private key not found" when I am consoled into the switch. 

 

 I would try to factory reset this switch. I would save the config in a TFTP server, factory reset it and bring the config back.

 But the message you get suggest a key. You could try to run the command  "crypto key generate rsa" ....and then use 2048 key size.

 

Got it,

I typed in the crypto key generate rsa modulus 4096. i will try 2048. Thank you for your help. 

Yeah, 2048 is the standard.  Try that and let us know.

Review Cisco Networking for a $25 gift card