06-02-2023 01:57 PM
i currently have a Cisco 9200 catalyst switch that I am working on for my current employer and I am unable to access the Web UI when i type in the IP address assigned to the switch. Every time i type the IP address into a web browser, the switch reads with a "private key not found" error. I have no ip http server, ip http authentication local, and ip http secure-server configured. Any assistance in this matter would be greatly appreciated.
Solved! Go to Solution.
06-05-2023 08:06 AM - edited 06-05-2023 08:06 AM
06-02-2023 02:17 PM
Hello,
not sure what your entire configuration looks like, make sure it is something like below (IP addresses are arbitrary):
username admin privilege 15 secret password123
!
interface vlan 1
ip address 192.168.1.10 255.255.255.0
no shutdown
!
ip http server
ip http secure-server
ip http authentication local
!
ip default-gateway 192.168.1.1
06-02-2023 02:56 PM
My configs looks like the one you provided, I will attach them below (I will also blank out some text lines for security purposes)
username ********** privilege 15 secret 9 $9$0FFgky2ZirAFtk$3kqWZzIgc1a/FR1XnKPmJ44GzpqYVW/6CtVyNYMCF0g
!
interface Vlan1
no ip address
!
interface Vlan100
ip address X.X.X.X 255.255.255.0
no ip proxy-arp
ip pim sparse-dense-mode
!
no ip http server
ip http authentication local
ip http secure-server
!
ip default-gateway X.X.X.X
06-02-2023 03:57 PM - edited 06-02-2023 03:58 PM
Hi
Are you using https://x.x.x.x right?
06-05-2023 07:58 AM
Yes that is correct.
06-05-2023 08:06 AM - edited 06-05-2023 08:06 AM
If you enable http and try with http://x.x.x.x
Does it work?
06-05-2023 08:11 AM
I disabled https and it works with http. When I try to use https, i get an error message that reads "private key not found" when I am consoled into the switch.
06-05-2023 08:17 AM
I would try to factory reset this switch. I would save the config in a TFTP server, factory reset it and bring the config back.
But the message you get suggest a key. You could try to run the command "crypto key generate rsa" ....and then use 2048 key size.
06-05-2023 08:18 AM
Got it,
I typed in the crypto key generate rsa modulus 4096. i will try 2048. Thank you for your help.
06-05-2023 08:24 AM
Yeah, 2048 is the standard. Try that and let us know.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide