HTTPS access issue at 3500

[Leftz]

Hi We have wlc 3500. Please see the below. HTTPS is enabled, but why we cannot access via https? Thank you very much. 

[Mark Elsen]

                 - What error are you getting in the browser ?

 M.

[Leftz]

Thanks marce1000 for your reply. Please see the below. and http has no problem.

[Mark Elsen]

 - Make sure no ACL's are in place on the controller that restrict certain components from administrative access , for that when using http check/verify  the the WLC GUI and choose Security > Access Control Lists

 M.

[MHM Cisco World]

Change the browser and try again

[Leftz]

Other browser has the same issue

The WLC has some ACL, but the management interface that we are using for access does not associate with any ACL. 

[MHM Cisco World]

Cpu acl ? Share it here if yes.

[Mark Elsen]

               - For sanity check remove/clear all acl's (temporarily)

 M.

[Leftz]

No cpu acl

and all ACLs are related with ISE and Guest wifi. Other wlc has the same ACL as this one. 

[Mark Elsen]

 - Check logs on the controller when https access is tried 2) Make sure no intermediate firewall blocks https access to the controller , 3) Fetch the (https)  page with wget ,( https://linuxize.com/post/wget-command-examples/ ) , check if you can find  additional errors.

 M.

[MHM Cisco World]

then this is not effect access to WLC.
in PC share the output of following 
telnet <WLC3500> port <443>
let see if there is any FW block the port in way to WLC.

[Rasika Nayanajith]

Are you trying to access it while connecting to wireless or from wired LAN? By default access via wirelessly is blocked.

As long as you have IP reachability from your LAN to WLC, you should be able to access from wired connected PC

HTH
Rasika

[MHM Cisco World]

Thanks for this point.

[MHM Cisco World]

https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-6/configuration-guide/b_cg76/b_cg76_chapter_0110010.pdf
management via Wireless feature must be enable.
check this point 

[Rich R]

Have you tried Deleting and Regenerating the self signed certificate? (followed by reload)

Or re-installing the public certificate (followed by reload) if you're using a public cert?

If still not working get a packet capture of the connection to see why it's closing the connection.