Cisco 5508 WLC v.8.5.161.0 doesn´t work via GUI but does work via SSH

[SerFer9]

Cisco 5508 WLC v.8.5.161.0 doesn´t work via GUI but does work via SSH. It used to work and then it stopped working. The web mode option is enabled. Any help or a similar case?

[jagan.chowdam]

Have you tried different browser or Incognito mode?

Are you trying to access WLC when connected via Wireless? 

What about Secure Web Mode status? 

With "show network summary" command verify

Web Mode.................................... Enable
Secure Web Mode............................. Enable

Jagan Chowdam

/**Pls rate useful responses**/

[SerFer9]

Hi @jagan.chowdam 

Have you tried different browser or Incognito mode?

-Yes, I tried with different browser and incognite mode but the result is the same.

Are you trying to access WLC when connected via Wireless? 

Yes...

What about Secure Web Mode status? With "show network summary" command verify

secure web mode is enabled too

Best regards

[MHM Cisco World]

add username with privilege 15  local in WLC 
and try again 

MHM

[SerFer9]

Hi, @MHM Cisco World  

Same results...

[marce1000]

  - Issue the CLI command :  config network secureweb enable
                                             Then try again with https

  M.

[SerFer9]

Hi, @marce1000 

same results. Was already activated.

Best regards

[marce1000]

              - What result (or error) do you get in the browser when trying ?

 M.

[SerFer9]

Hi, @marce1000 

This error:

Unable to access this website
xxx.xxx.xxx.xxx.xxx has taken too long to respond.

[MHM Cisco World]

Can I see show network summary 

MHM

[SerFer9]

Hi @MHM Cisco World 

Here you are:

RF-Network Name............................. xxxxxxxxxxxxxxx
DNS Server IP............................... 0.0.0.0
Web Mode.................................... Enable
Secure Web Mode............................. Enable
Secure Web Mode Cipher-Option High.......... Disable
Secure Web Mode SSL Protocol................ Disable
Web CSRF check.............................. Enable
OCSP........................................ Disabled
OCSP responder URL..........................
Secure Shell (ssh).......................... Enable
Secure Shell (ssh) Cipher-Option High....... Disable
Telnet...................................... Disable
Ethernet Multicast Forwarding............... Enable
Ethernet Broadcast Forwarding............... Enable
IPv4 AP Multicast/Broadcast Mode............ Multicast Address : xxxxxxxxxxxxxxx
IPv6 AP Multicast/Broadcast Mode............ Unicast
IGMP snooping............................... Enabled
IGMP timeout................................ 60 seconds
IGMP Query Interval......................... 20 seconds
MLD snooping................................ Enabled
MLD timeout................................. 60 seconds

--More or (q)uit current module or <ctrl-z> to abort
MLD query interval.......................... 20 seconds
User Idle Timeout........................... 300 seconds
ARP Idle Timeout............................ 300 seconds
Cisco AP Default Master..................... Disable
AP Join Priority............................ Disable
Mgmt Via Wireless Interface................. Enable
Mgmt Via Dynamic Interface.................. Disable
Bridge MAC filter Config.................... Enable
Bridge Security Mode........................ EAP
Mesh Full Sector DFS........................ Enable
Mesh Backhaul RRM........................... Disable
AP Fallback ................................ Enable
AP EasyAdmin ............................... Disable
AP Virtual IP .............................. 0.0.0.0
Web Auth CMCC Support ...................... Disabled
Web Auth Redirect Ports .................... 80
Web Auth Proxy Redirect ................... Disable
Web Auth Captive-Bypass .................. Enable
Web Auth Secure Web ....................... Enable
Web Auth Secure Web Cipher Option ......... Disable
Web Auth Secure Web Sslv3 ................. Disable
Web Auth Secure Redirection ............... Disable
Fast SSID Change ........................... Enabled

--More or (q)uit current module or <ctrl-z> to abort
AP Discovery - NAT IP Only ................. Enabled
IP/MAC Addr Binding Check .................. Enabled
Link Local Bridging Status ................. Disabled
CCX-lite status ............................ Disable
oeap-600 dual-rlan-ports ................... Disable
oeap local-network ......................... Enable
oeap-600 Split Tunneling (Printers)......... Disable
WebPortal Online Client .................... 0
WebPortal NTF_LOGOUT Client ................ 0
mDNS snooping............................... Enabled
mDNS Query Interval......................... 15 minutes
Web Color Theme............................. Default
Capwap Prefer Mode.......................... IPv4
Network Profile............................. Disabled
Client ip conflict detection (DHCP) ........ Disabled
Mesh BH RRM ................................ Disable
Mesh Aggressive DCA......................... Disable
Mesh Auto RF................................ Disable
HTTP Profiling Port......................... 80
HTTP-Proxy Ip Address....................... 0.0.0.0
HTTP-Proxy Port............................. 80
WGB Client Forced L2 Roam................... Disabled

[MHM Cisco World]

config network secureweb cipher-option high enable

Add this command and chec

MHM

[marce1000]

@MHM Cisco World - That's curranty not yet applicable because it seems that the customer get's no response from the controller at all ,

 M.

[MHM Cisco World]

If the cipher is not accept by wlc/pc then http stop

MHM

[marce1000]

 @MHM Cisco World         ??? => Please try to clarify your statements ,

 M.