Cisco 2504 - gui not accessible

[r1127hyduk]

Hello All,

I'm looking for any insight as to why a browser connection to a Cisco 2504 WLC (Gui) may not be working.  Could this be browser related - Edge and Firefox were tried, WLC code related, certificate expiry related or?  Connection was local from inside the network to WLC so no firewalls or NAT were in play.

For a successful try, I do have a similar 2504 WLC system where connectivity works just fine via browser and CLI.  The IOS code is the same on both systems.

[r1127hyduk]

WLC uses an unsupported protocol .... ERR_SSL_Version_or_Cipher_Match .... what would this message have to do with the issue?  and how to fix?

[balaji.bandi]

Looks for me TLS issue :

https://community.cisco.com/t5/wireless/tls-1-2-on-wlc-gui-management-interface/td-p/2906432

[r1127hyduk · Accepted solution]

Additional information - the system is working, however the GUI is not reachable .... if time sync and date are adjusted, what risk is there to lose connectivity to AP's (since users are able to access the network at this time - and for a long time --- years.  Gui just stopped working this week)?

[balaji.bandi]

If this was operational and you do not have any operational issues with services, if this is only issue with GUI, the most cause of the handshake issue, get an old browser and test it ( try pale moon and see of that works).

Make sure the browser supports TLS 1.1 / 1.2 so on.

personally, I do not believe this is anything to do with NTP as per the error you posted.

when you get maintenance window, reboot WLC and test it (other option)

[MrButton · Accepted solution]

console or ssh into the WLC and sync the date + time, then retry over https.

[Rich R]

Have you tried regenerating the WLC certificate? (assuming you're using self-signed cert).

Also compare the Secure Web settings on the 2 WLCs (Security -> Web Auth -> Secure Web).

[r1127hyduk · Accepted solution]

This is confirmed as a Browser issue -- IE version worked from a system that is 5 years old (IE10.x).  Edge did not work and neither did Chrome.

[Rich R]

You never mentioned what version of code you were using but also useful to make sure you're using latest available version of code (also see links below for TAC recommended releases)

Firefox 68.12.0esr works reliably for us on 8.0, 8.5 and 8.10 releases.

Note that if you switch between http and https on the GUI that's more or less guaranteed to cause problems - you need to clear all history and cookies and restart browser if you do that.  Then stick to using one or the other - never both.