cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1922
Views
25
Helpful
2
Replies

C9120AXE GUI admin access cycles

Hi

i have C9120AXE-B running 17.3.3. 0-day config is passed & i can login via SSH on the AP using configured creds. Web GUI also accessible but login process gets cycled (page just swallows creds & respawns).

authen is local. any help pls?

ap profile default-ap-profile
description "default ap profile"
mgmtuser username admin password 0 <password> secret 0 <password>

 

ip http server
ip http authentication local
ip http secure-server
ip http secure-trustpoint CISCO_IDEVID_SUDI
ip http client source-interface GigabitEthernet0

any debug attempts show nothing or fail:

sho debugging         //shows nothing
Packet Infra debugs:

Ip Address Port
------------------------------------------------------|----------

HTTP Server:
HTTP Server Authentication debugging is on
Auth Manager:
Auth Manager errors debugging is on
Auth Manager events debugging is on
Auth Manager detailed debugs debugging is on
Auth Manager sync debugging is on

 

set platform software trace smd chassis 1 r0 auth-mgr-all debug           //fails
The process for the command is not responding or is otherwise unavailable

1 Accepted Solution

Accepted Solutions

Rich R
VIP
VIP

You haven't posted full config so can't see but you don't have authorization configured do you? (it's not supported for the GUI).

Presume you've tried different browsers?

Presume you're doing it in a private browsing window?

Are you trying to use the mgmtuser (admin) or have you tried using a local user with priv level 15?

------------------------------
Please click Helpful if this post helped you and Accept as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's   and   TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's,   Best Practices for 9800 WLC's   and   Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
Field Notice: FN74383 APs Running 17.12.4/5/6/6a May Run Out of Flash Space Preventing Upgrades
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

View solution in original post

2 Replies 2

Rich R
VIP
VIP

You haven't posted full config so can't see but you don't have authorization configured do you? (it's not supported for the GUI).

Presume you've tried different browsers?

Presume you're doing it in a private browsing window?

Are you trying to use the mgmtuser (admin) or have you tried using a local user with priv level 15?

------------------------------
Please click Helpful if this post helped you and Accept as Solution (drop down menu at top right of this reply) if this answered your query.
------------------------------
TAC recommended codes for AireOS WLC's   and   TAC recommended codes for 9800 WLC's
Best Practices for AireOS WLC's,   Best Practices for 9800 WLC's   and   Cisco Wireless compatibility matrix
Check your 9800 WLC config with Wireless Config Analyzer using "show tech wireless" output or "config paging disable" then "show run-config" output on AireOS and use Wireless Debug Analyzer to analyze your WLC client debugs
Field Notice: FN63942 APs and WLCs Fail to Create CAPWAP Connections Due to Certificate Expiration
Field Notice: FN72424 Later Versions of WiFi 6 APs Fail to Join WLC - Software Upgrade Required
Field Notice: FN72524 IOS APs stuck in downloading state after 4 Dec 2022 due to Certificate Expired
- Fixed in 8.10.196.0, latest 9800 releases, 8.5.182.12 (8.5.182.13 for 3504) and 8.5.182.109 (IRCM, 8.5.182.111 for 3504)
Field Notice: FN70479 AP Fails to Join or Joins with 1 Radio due to Country Mismatch, RMA needed
Field Notice: FN74383 APs Running 17.12.4/5/6/6a May Run Out of Flash Space Preventing Upgrades
How to avoid boot loop due to corrupted image on Wave 2 and Catalyst 11ax Access Points (CSCvx32806)
Field Notice: FN74035 - Wave2 APs DFS May Not Detect Radar After Channel Availability Check Time
Leo's list of bugs affecting 2800/3800/4800/1560 APs
Default AP console baud rate from 17.12.x is 115200 - introduced by CSCwe88390

hi dude

followed your suggestion to try private mode & was able to login with both Edge & Chrome.

Only the mode i was able to login with!

but connection i've got looked quite wierd:

5A5DCCE0 192.168.1.6.443 192.168.1.5.48755 TIMEWAIT

there r no interfaces with IP 192.168.1.6 on the AP neither browsers run on the host with IP 192.168.1.5!

Review Cisco Networking for a $25 gift card