webui question

[Bobby P]

Working on configuring new C9300 switches.  In the getting started guide for configuration it indicates I can plug PC into any unmanaged network port on the switch and use the WEBUI site at 192.168.1.1 to configure the switch.  The PC must be configured for DHCP and it should get an IP from the switch.  

This is not working and looking to see if there is a service to start on the switch.  

I can connect to the switch console port and access the cli.  Limited CLI experience and would prefer the GUI to configure the switch.

[Mark Malone]

sorry you tried IE , did it give you an option to still advance even if unsecure ?

[neebaum]

Mark, there's no option for me to continue even if unsecure.

[neebaum]

Hi Mark, I tried http://192.168.1.1 as well even though the instructions state to use https and it doesn't work either.  Nothing ever displays and it keeps saying Waiting for 192.168.1.1

[Mark Malone]

if you got an IP address then switch side is working fine , if you can ping it too
the HTTP issue is a TLS issue on laptop you may have to change settings

https://answers.microsoft.com/en-us/ie/forum/all/cant-connect-securely-to-this-page/e9453552-6f7e-43ef-9374-a424930e4c9c

[neebaum]

Still no joy.  I tried changing the TLS settings in IE every which way and it still doesn't work.  Any other ideas?  Thanks.

[Mark Malone]

You've enabled all TLS in the browsers yes , that should be the fix for TLS issues
try clear your cache , reboot the laptop try again
you cant change the tls on the cisco side its default , so you need to change it on the laptop side
you could try another pc if you have one spare too

https://h30434.www3.hp.com/t5/Notebook-Software-and-How-To-Questions/I-cannot-connect-to-any-websites-because-they-use-outdated/td-p/6727326

[neebaum]

I've tried everything you suggested and still no go.  So odd.  I would really love to get this working somehow.

[neebaum]

Hi Mark, anything else you could recommend or should I open a TAC case?  Thanks again for your assistance.

[Mark Malone]

Hi
Could you post your TLS settings off the browser and post the "show run all" off the the switch please and we see exactly whats enabled by default both ends and see if we can fix it.

[neebaum]

Morning Mark, see attached files and let me know if you see anything that would be causing the issue.  Thanks.

[Mark Malone]

Hi
what did TAC say , did they not get anywhere with it ?
have you tried another PC just to rule that out too
Im checking file to see if there is anything in it but i dont see anything related to TLS , the HTTP settings look fine

you could try unsecure as an option no 443 go over normal http ,not sure if it will work ,that might avoid authentication in the switch config and avoid the TLS issue ...

no ip http secure-port 443
ip http port 80

[kezumi]

Hi Neebaum,

I have same issue. I can't get an access to Web GUI on Catalyst9200.

Could you tell me how to get an IP address from the switch?

Did you change anything on it?

[neebaum]

Hi Kezumi, I never got it working.  As for the IP is should already be on the device by default but as I stated I never got it working so I ended up just configuring it via CLI.  I wasted too much time trying to get the web ui to work.  If you get it working or if anyone else does please let me know how as it would be nice to see how easy it is to set up via the web ui.  Thanks & good luck.

[kezumi]

Hi neebaum,
Thank you for your reply. I noticed your answer today. Sorry for my late response.

I've tried many ways, but never been given GUI access. I gave up, too.

[almccanuel]

Hi Maek,

I can access the UI but the default credentials does not work. i put cisco as username and my SN as password