cisco switch getting server doesn't respond when signing on with GUI

[Thomas Garringer]

Trying to sign on the web interface of switch.  It's gets to sign on page than it times out saying server doesn't respond.  

When I connect with SSH, the message %AAA-W-reject message appear.  Have tried most on the web.  Some of switch can logon without problem

[Flavio Miranda]

Hi

 Do you have this configured on the switch?

ip http authentication local

[Thomas Garringer]

I get this.  

Bullpen5(config)#ip http authentication local
% Unrecognized command
Bullpen5(config)#

[MHM Cisco World]

are you config AAA ? did you use fallback LOACL in AAA Auth ? did you config any username/password before run aaa new model ?

[Flavio Miranda · Accepted solution]

Basically your problem is here

ip http authentication aaa login-authentication radius

If you dont have radius, you need to run

conf t

 no ip http authentication aaa login-authentication radius

ip http authentication aaa login-authentication local

[Thomas Garringer]

i found these commands online but when i run them I get these so i get lost

Bullpen5(config)#no ip http authentication aaa login-authentication raidus
% Wrong number of parameters or invalid range, size or characters entered

[Thomas Garringer]

local account was created ( i didn't do it, i inherited it). Am able to ssh with local account.  at one point i was able to get into Gui interface with no problem.  Supposedly Radius is setup to be able to use AD to login but that doesn't seem to work.  DUO acts as radius and DUO works with other apps.  I am very newbie I know enough to break things.  

[MHM Cisco World]

share the AAA config please 

[Thomas Garringer]

Bullpen5#show aaa authentication
% Unrecognized command
Bullpen5#config t
Bullpen5(config)#show aaa authentication
% Unrecognized command
Bullpen5(config)#

this is what I get

[MHM Cisco World]

show run | aaa 

[Thomas Garringer]

Bullpen5(config)#show run | aaa
% Unrecognized command
Bullpen5(config)#

[MHM Cisco World]

show run 

[Thomas Garringer]

Bullpen5#sh run
config-file-header
Bullpen5
v2.4.0.91 / RTESLA2.4_930_181_042
CLI v1.0
file SSD indicator encrypted
@
ssd-control-start
ssd config
ssd file passphrase control unrestricted
no ssd file integrity control
ssd-control-end cb0a3fdb1f3a1af4e4430033719968c0
!
!
unit-type-control-start
unit-type unit 1 network gi uplink none
unit-type-control-end
!
cdp holdtime 255
vlan database
vlan 11,51-55,100
exit
voice vlan id 55
voice vlan oui-table add 0001e3 Siemens_AG_phone________
voice vlan oui-table add 00036b Cisco_phone_____________
voice vlan oui-table add 00096e Avaya___________________
voice vlan oui-table add 000fe2 H3C_Aolynk______________
voice vlan oui-table add 0060b9 Philips_and_NEC_AG_phone
voice vlan oui-table add 00d01e Pingtel_phone___________
voice vlan oui-table add 00e075 Polycom/Veritel_phone___
voice vlan oui-table add 00e0bb 3Com_phone______________
gvrp enable
bonjour interface range vlan 1
hostname Bullpen5
radius-server host 10.0.0.15 usage login
radius-server timeout 10
radius-server deadtime 1
ip http authentication aaa login-authentication radius
aaa authentication login SSH radius
aaa authentication enable SSH radius
aaa authentication login Console radius
aaa authentication enable Console radius
aaa authentication enable authorization default none
line console
login authentication Console
enable authentication Console
password da39a3ee5e6b4b0d3255bfef95601890afd80709 encrypted
exit
username TAF password encrypted 51f168d2e6f880fd9a53835a6fcbe66d23375887 privilege 15
username cisco password encrypted c95cd909a07c1f9821c83a296b14be1dd846c339 privilege 15
username bcollins password encrypted 13718a288ece33f34043bbb29bfdcef8f8046e3e privilege 15
ip ssh server
ip ssh password-auth
crypto key pubkey-chain ssh
user-key bcollins rsa
key-string row AAAAB3NzaC1yc2EAAAADAQABAAABAQChLfgFmsrl
key-string row QSCdCKQFejL/CS5A12fKDH2c/h4DlpD/f3p9fCsh
key-string row q+kN5VQXJDYGr1gILaCwRU23HRzuTF8J6zbrbxyG
key-string row zfrAM++o6AlZyZ/Jb39NuZKpQmaXeQCi
key-string row DIVTiUZT5KigPOCkjEJ+tQp4kaZebVOSLgw4WrZo
key-string row A+2rsGKTeqe69BGacqBtI1t+ZQxjVgc3qqpZ1Qi0
key-string row JtQqiSOMljbmDVtttl98rqfiYnE6pdCaGSAnnCj4
key-string row lxmK31CZ/LGfNVi1aTm9QeAz6m60P65cDwK3lS8V
key-string row 5ee1/3V6icrO71gCoKj5fgpZQEh4aeqKtaO/tz6T
key-string row CFZK+UG8bfME8UUHIUfX
exit
exit
snmp-server server
snmp-server location "Bullpen 5"
clock timezone PST -7
!
interface vlan 1
no ip address dhcp
!
interface vlan 11
name Computers
!
interface vlan 51
name Cameras
!
interface vlan 52
name "CC Terminals"
!
interface vlan 53
name Printers
!
interface vlan 54
name "Access Controls"
!
interface vlan 55
name Phones
!
interface vlan 100
name MGMT
ip address dhcp
!
interface GigabitEthernet1
switchport access vlan 11
!
interface GigabitEthernet4
storm-control broadcast level 10
storm-control multicast level 10
port security max 10
port security mode max-addresses
port security discard trap 60
spanning-tree portfast
spanning-tree bpduguard enable
switchport mode trunk
switchport trunk allowed vlan remove 2-54,56-4094
macro description ip_phone_desktop
!next command is internal.
macro auto smartport dynamic_type ip_phone_desktop
!
interface GigabitEthernet6
switchport access vlan 11
!
interface GigabitEthernet7
storm-control broadcast level 10
storm-control multicast level 10
port security max 10
port security mode max-addresses
port security discard trap 60
spanning-tree portfast
spanning-tree bpduguard enable
switchport mode trunk
switchport access vlan 53
switchport trunk allowed vlan remove 2-54,56-4094
macro description ip_phone_desktop
!next command is internal.
macro auto smartport dynamic_type ip_phone_desktop
!
interface GigabitEthernet9
spanning-tree link-type point-to-point
switchport mode trunk
macro description switch
!next command is internal.
macro auto smartport dynamic_type switch
!
interface GigabitEthernet10
storm-control broadcast level 10
storm-control multicast level 10
port security max 10
port security mode max-addresses
port security discard trap 60
spanning-tree portfast
spanning-tree bpduguard enable
switchport mode trunk
switchport trunk allowed vlan remove 2-54,56-4094
macro description ip_phone_desktop
!next command is internal.
macro auto smartport dynamic_type ip_phone_desktop
!
interface GigabitEthernet12
storm-control broadcast level 10
storm-control multicast level 10
port security max 10
port security mode max-addresses
port security discard trap 60
spanning-tree portfast
spanning-tree bpduguard enable
switchport mode trunk
switchport trunk allowed vlan remove 2-54,56-4094
macro description ip_phone_desktop
!next command is internal.
macro auto smartport dynamic_type ip_phone_desktop
!
interface GigabitEthernet18
spanning-tree link-type point-to-point
switchport access vlan 53
macro description switch
!next command is internal.
macro auto smartport dynamic_type switch
!
interface GigabitEthernet21
spanning-tree link-type point-to-point
switchport mode trunk
macro description switch
!next command is internal.
macro auto smartport dynamic_type switch
!
interface GigabitEthernet26
switchport access vlan 51
!
interface GigabitEthernet30
spanning-tree link-type point-to-point
switchport mode trunk
macro description ap
!next command is internal.
macro auto smartport dynamic_type ap
!
interface GigabitEthernet31
switchport access vlan 11
!
interface GigabitEthernet45
spanning-tree link-type point-to-point
switchport mode trunk
macro description ap
!next command is internal.
macro auto smartport dynamic_type ap
!
interface GigabitEthernet46
switchport access vlan 54
!
interface GigabitEthernet47
switchport access vlan 54
!
interface GigabitEthernet48
switchport access vlan 54
!
interface GigabitEthernet51
gvrp enable
spanning-tree link-type point-to-point
switchport mode trunk
macro description switch
!next command is internal.
macro auto smartport dynamic_type switch
!
interface GigabitEthernet52
gvrp enable
spanning-tree link-type point-to-point
switchport mode trunk
macro description switch
!next command is internal.
macro auto smartport dynamic_type switch

[MHM Cisco World]

There are many mistakes in config' I will share example of config aaa auth for 

Ssh and http

And for console I prefer make it always local.

[Thomas Garringer]

thank you.  I just started this position not too long ago and definitely don't know command area.  can get around GUI to get things done.