Catalyst 9000 Can't enable http (web gui)

Ethan and Mia · ‎05-26-2021

Hi , Master

I don't know why can't enable http , https server how should troubleshoot it

I try "show ip http server all"  the result as below

Switch-01#sh ip http server all
HTTP server status: Enabled
HTTP server port: 80
HTTP server active supplementary listener ports: 21111
HTTP server authentication method: local
HTTP server auth-retry 0 time-window 0
HTTP server digest algorithm: md5
HTTP server access class: 0
HTTP server IPv4 access class: None
HTTP server IPv6 access class: None
HTTP server base path:
HTTP File Upload status: Disabled
HTTP server upload path:
HTTP server help root:
Maximum number of concurrent server connections allowed: 300
Maximum number of secondary server connections allowed: 50
Server idle time-out: 180 seconds
Server life time-out: 180 seconds
Server session idle time-out: 600 seconds
Maximum number of requests allowed on a connection: 25
Server linger time : 60 seconds
HTTP server active session modules: ALL
HTTP secure server capability: Present
HTTP secure server status: Enabled
HTTP secure server port: 443
HTTP secure server ciphersuite: rsa-aes-cbc-sha2 rsa-aes-gcm-sha2
dhe-aes-cbc-sha2 dhe-aes-gcm-sha2 ecdhe-rsa-aes-cbc-sha2
ecdhe-rsa-aes-gcm-sha2 ecdhe-ecdsa-aes-gcm-sha2
HTTP secure server TLS version: TLSv1.2 TLSv1.1
HTTP secure server client authentication: Disabled
HTTP secure server PIV authentication: Disabled
HTTP secure server PIV authorization only: Disabled
HTTP secure server trustpoint: TP-self-signed-1048334206
HTTP secure server peer validation trustpoint:
HTTP secure server ECDHE curve: secp256r1
HTTP secure server active session modules: ALL

HTTP server application session modules:
Session module Name Handle Status Secure-status Description
OPENRESTY_PKI 3 Active Active IOS OpenResty PKI Server
GSI7F86FB31D380-web 9 Active Active wsma infra
HOME_PAGE 4 Active Active IOS Homepage Server
HTTP_IFS 1 Active Active HTTP based IOS File Server
SL_HTTP 2 Active Active HTTP REST IOS-XE Smart License Server
BANNER_PAGE 5 Active Active HTTP Banner Page Server
WEB_EXEC 6 Active Active HTTP based IOS EXEC Server
IXI 7 Active Active IOS XML Infra Application Server
GSI7F86F8552D40-lic 8 Active Active license agent app
GSI7F86FB0B50C0-web 10 Active Active wsma infra
NG_WEBUI 11 Active Active Web GUI

HTTP server current connections:
local-ipaddress:port remote-ipaddress:port in-bytes out-bytes
127.0.0.1:21111 127.0.0.1:35258 0 0

Nginx Internal Counters:
Nginx pool = 915
Active connection = 1
Nginx pool available = 898
Maxmum connection Hit = 0

HTTP server statistics:
Accepted connections total: 1
server accepts handled requests
118 118 38
Reading: 0 Writing: 1 Waiting: 0

192.168.1.6:80 192.168.1.5:39816 1606 1491 11:32:17 05/25
192.168.1.6:80 192.168.1.5:39818 1584 890 11:32:17 05/25
192.168.1.6:21111 192.168.1.5:55016 162 408 11:32:17 05/25
192.168.1.6:21111 192.168.1.5:55018 162 408 11:32:17 05/25
192.168.1.6:21111 192.168.1.5:55020 162 408 11:33:48 05/25
192.168.1.6:21111 192.168.1.5:55022 162 408 11:33:48 05/25
192.168.1.6:21111 192.168.1.5:55024 162 408 11:33:48 05/25
192.168.1.6:21111 192.168.1.5:55026 162 408 11:33:48 05/25
192.168.1.6:21111 192.168.1.5:55032 162 408 02:37:32 05/27
192.168.1.6:21111 192.168.1.5:55034 162 408 02:37:32 05/27
192.168.1.6:21111 192.168.1.5:55036 162 408 02:37:33 05/27
192.168.1.6:21111 192.168.1.5:55038 162 408 02:37:33 05/27
192.168.1.6:21111 192.168.1.5:55040 162 408 02:37:33 05/27
192.168.1.6:21111 192.168.1.5:55042 162 408 02:37:33 05/27
192.168.1.6:80 192.168.1.5:39848 1295 1499 02:39:35 05/27
192.168.1.6:80 192.168.1.5:39850 1273 890 02:39:35 05/27
192.168.1.6:80 192.168.1.5:39852 1276 1499 02:39:36 05/27
192.168.1.6:80 192.168.1.5:39854 1254 890 02:39:36 05/27
192.168.1.6:21111 192.168.1.5:55052 162 408 02:39:36 05/27
192.168.1.6:21111 192.168.1.5:55054 162 408 02:39:36 05/27

HTTP server help path:

ip http server
ip http authentication local
ip http secure-server
ip http secure-trustpoint TP-self-signed-1048334206
ip http client source-interface Vlan1

rasmus.elmholt · ‎05-26-2021

What is the error you get when you try to access the webpage on port 80/443?

Ethan and Mia · ‎05-27-2021

marce1000 · ‎05-27-2021

- Post the output of show version and dir flash:

M.

-- Each morning when I wake up and look into the mirror I always say ' Why am I so brilliant ? '
When the mirror will then always repond to me with ' The only thing that exceeds your brilliance is your beauty! '

Ethan and Mia · ‎05-28-2021

Dir Flash

Directory of flash:/

327686 -rw- 5242880 May 27 2021 19:51:04 +07:00 ssd
442371 -rwx 2097152 May 27 2021 18:11:53 +07:00 nvram_config_bkup
442370 -rw- 2097152 May 27 2021 18:11:53 +07:00 nvram_config
475137 drwx 4096 May 24 2021 19:58:15 +07:00 .installer
344079 -rw- 0 May 24 2021 19:51:03 +07:00 dope_hist
344076 -rw- 16929 May 24 2021 19:51:03 +07:00 rdope_out.txt
344078 -rw- 89 May 24 2021 19:51:02 +07:00 rdope.log
491522 drwx 4096 May 24 2021 19:50:46 +07:00 .prst_sync
344075 -rwx 2049 May 24 2021 19:50:08 +07:00 svl_ipc.tcl
344067 -rw- 134458 May 24 2021 19:50:08 +07:00 memleak.tcl
344066 -rw- 395 May 24 2021 19:49:56 +07:00 boothelper.log
524293 drwx 4096 May 24 2021 19:49:55 +07:00 dc_profile_dir
344065 -rw- 888 May 24 2021 19:49:45 +07:00 bootloader_evt_handle.log
344083 -rw- 15637 May 19 2021 20:00:03 +07:00 startup-config
475148 drwx 4096 Apr 23 2021 00:27:32 +07:00 webui_helper
344081 -rw- 1837016 Apr 20 2021 22:23:34 +07:00 webuiTmp.pcap
507905 drwx 4096 Jan 23 2021 05:09:38 +07:00 .rollback_timer
532481 drwx 4096 Jan 23 2021 03:17:49 +07:00 .dbpersist
589832 drwx 4096 Jan 23 2021 03:11:43 +07:00 .rommon_sync
589825 drwx 4096 Jan 23 2021 03:11:39 +07:00 Tbot
557060 drwx 4096 Jan 23 2021 03:11:32 +07:00 fp_cc_crash
548866 drwx 4096 Jan 23 2021 03:11:32 +07:00 sys_report
524289 drwx 4096 Jan 23 2021 03:11:31 +07:00 tech_support
475138 drwx 4096 Jan 23 2021 03:11:29 +07:00 ss_disc
327688 -rw- 918 Jan 23 2021 03:09:45 +07:00 .packages.verify.log
344077 -rw- 7714 Jan 23 2021 03:09:27 +07:00 packages.conf
483337 -rw- 7714 Jan 23 2021 03:05:26 +07:00 cat9k_iosxe.17.04.01.SPA.conf
483348 -rw- 46825262 Jan 23 2021 03:05:26 +07:00 cat9k-rpboot.17.04.01.SPA.pkg
483347 -rw- 9220 Jan 23 2021 03:04:58 +07:00 cat9k-wlc.17.04.01.SPA.pkg
483346 -rw- 14914564 Jan 23 2021 03:04:58 +07:00 cat9k-webui.17.04.01.SPA.pkg
483345 -rw- 29221896 Jan 23 2021 03:04:58 +07:00 cat9k-srdriver.17.04.01.SPA.pkg
483344 -rw- 58852356 Jan 23 2021 03:04:57 +07:00 cat9k-sipspa.17.04.01.SPA.pkg
483343 -rw- 36721672 Jan 23 2021 03:04:55 +07:00 cat9k-sipbase.17.04.01.SPA.pkg
483342 -rw- 624468996 Jan 23 2021 03:04:54 +07:00 cat9k-rpbase.17.04.01.SPA.pkg
483341 -rw- 5124 Jan 23 2021 03:04:36 +07:00 cat9k-lni.17.04.01.SPA.pkg
483340 -rw- 2085896 Jan 23 2021 03:04:36 +07:00 cat9k-guestshell.17.04.01.SPA.pkg
483339 -rw- 108168200 Jan 23 2021 03:04:36 +07:00 cat9k-espbase.17.04.01.SPA.pkg
483338 -rw- 17867788 Jan 23 2021 03:04:33 +07:00 cat9k-cc_srdriver.17.04.01.SPA.pkg
344074 -rw- 938738554 Jan 21 2021 13:26:29 +07:00 cat9k_iosxe.17.04.01.SPA.bin
344068 -rw- 1326 Jan 20 2021 03:52:25 +07:00 tam_client_app.log
344072 -rw- 976 Nov 20 2020 12:31:47 +07:00 vlan.dat
344073 -rw- 616 Mar 3 2020 13:21:24 +07:00 stby-vlan.dat
344071 -rw- 55048 Apr 2 2019 11:10:46 +07:00 pnp-tech-discovery-summary
344070 -rw- 34 Apr 2 2019 11:10:44 +07:00 pnp-tech-time
483329 drwx 4096 Apr 2 2019 11:10:13 +07:00 core
540673 drwx 4096 Apr 2 2019 11:09:53 +07:00 onep
327687 -rw- 31663077 Apr 2 2019 11:04:18 +07:00 cat9k-rpboot.16.08.01a.SPA.pkg
327685 -rw- 9152 Apr 2 2019 11:04:18 +07:00 cat9k-wlc.16.08.01a.SPA.pkg
327684 -rw- 14783424 Apr 2 2019 11:04:18 +07:00 cat9k-webui.16.08.01a.SPA.pkg
327683 -rw- 31130564 Apr 2 2019 11:04:18 +07:00 cat9k-srdriver.16.08.01a.SPA.pkg
327682 -rw- 52220868 Apr 2 2019 11:04:18 +07:00 cat9k-sipspa.16.08.01a.SPA.pkg
327681 -rw- 27681732 Apr 2 2019 11:04:18 +07:00 cat9k-sipbase.16.08.01a.SPA.pkg
442375 -rw- 404104132 Apr 2 2019 11:04:18 +07:00 cat9k-rpbase.16.08.01a.SPA.pkg
442374 -rw- 1598408 Apr 2 2019 11:04:18 +07:00 cat9k-guestshell.16.08.01a.SPA.pkg
442373 -rw- 78484420 Apr 2 2019 11:04:18 +07:00 cat9k-espbase.16.08.01a.SPA.pkg
442372 -rw- 25711560 Apr 2 2019 11:04:18 +07:00 cat9k-cc_srdriver.16.08.01a.SPA.pkg

11353194496 bytes total (8187207680 bytes free)

SHow Ver

Cisco IOS XE Software, Version 17.04.01
Cisco IOS Software [Bengaluru], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 17.4.1, RELEASE SOFTWARE (fc5)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2020 by Cisco Systems, Inc.
Compiled Thu 26-Nov-20 23:35 by mcpre

Cisco IOS-XE software, Copyright (c) 2005-2020 by cisco Systems, Inc.
All rights reserved. Certain components of Cisco IOS-XE software are
licensed under the GNU General Public License ("GPL") Version 2.0. The
software code licensed under GPL Version 2.0 is free software that comes
with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such
GPL code under the terms of GPL Version 2.0. For more details, see the
documentation or "License Notice" file accompanying the IOS-XE software,
or the applicable URL provided on the flyer accompanying the IOS-XE
software.

ROM: IOS-XE ROMMON
BOOTLDR: System Bootstrap, Version 17.4.1r, RELEASE SOFTWARE (P)

BT uptime is 3 days, 22 hours, 32 minutes
Uptime for this control processor is 3 days, 22 hours, 34 minutes

System image file is "flash:packages.conf"
Last reload reason: Reload Command

This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html

If you require further assistance please contact us by sending email to
export@cisco.com.

Technology Package License Information:

------------------------------------------------------------------------------
Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------------------
network-essentials Smart License network-essentials
dna-essentials Subscription Smart License dna-essentials
AIR License Level: AIR DNA Advantage
Next reload AIR license Level: AIR DNA Advantage

Smart Licensing Status: Registration Not Applicable/Not Applicable

cisco C9300-24P (X86) processor with 1326055K/6147K bytes of memory.
Processor board ID FCW2308C12X
6 Virtual Ethernet interfaces
56 Gigabit Ethernet interfaces
16 Ten Gigabit Ethernet interfaces
4 TwentyFive Gigabit Ethernet interfaces
4 Forty Gigabit Ethernet interfaces
2048K bytes of non-volatile configuration memory.
8388608K bytes of physical memory.
1638400K bytes of Crash Files at crashinfo:.
1638400K bytes of Crash Files at crashinfo-2:.
11264000K bytes of Flash at flash:.
11264000K bytes of Flash at flash-2:.

Base Ethernet MAC Address : XXXXXXXX
Motherboard Assembly Number : 73-18271-03
Motherboard Serial Number : XXXXXXXXXX
Model Revision Number : A0
Motherboard Revision Number : A0
Model Number : C9300-24P
System Serial Number : XXXXXXXXX
CLEI Code Number :

Switch Ports Model SW Version SW Image Mode
------ ----- ----- ---------- ---------- ----
* 1 41 C9300-24P 17.04.01 CAT9K_IOSXE INSTALL
2 41 C9300-24T 17.04.01 CAT9K_IOSXE INSTALL

Switch 02
---------
Switch uptime : 3 days, 22 hours, 34 minutes

Base Ethernet MAC Address : XXXXXXX
Motherboard Assembly Number : XXXXXXXXX
Motherboard Serial Number : XXXXXX
Model Revision Number : A0
Motherboard Revision Number : A0
Model Number : C9300-24T
System Serial Number : XXXXXXXX
Last reload reason : Reload Command
CLEI Code Number :

Configuration register is 0x102

rasmus.elmholt · ‎05-29-2021

Could you try and do a show ip int brie, and show us the configuration of the L3 interface with the ip address 172.27.254.1?

sSiDs · ‎05-28-2021

when i read this

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/17-3/configuration_guide/b-173-9300-cg/configuring_switch_webui.html

it helps me to get to Web UI on 9300-48p

sSiDs · ‎05-28-2021

sorry, this link is most proper https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-5/configuration_guide/sec/b_165_sec_9300_cg/configuring_secure_socket_layer_http.html#reference_97DC48C0A4A041B58EFA5B4F027E6586

but Web UI eating CPU....