HTTPS access to Wireless controller works wrong over VPN after upgrade

[m-karasek]

Hello,
It happens second time to me, on two platforms. WISM2 and WLC5508.

After some minor upgrade HTTPS access to admi web-gui starts working wrong.

In this last case it was after the upgrade from 8.5.140.0 to 8.5.161.0

webpages starts loading incomplete, or timeouts sometimes, but after few refreshes it loads complete.

Sometimes it loads without problem at a first time.

This happens just when i'm connected over VPN. But before upgrade it works well through thit connection.

Also http access works well before or after upgrade, but it's not ideal way to administrate it. (ssh also works good)

I gues it can be MTU problem, but haven't found any posisbility to tune MTU for the web interface, and
modifying the global MSS for CAPWAP doesn't help.

Does anybody have the same problem or its sollution?

Thank you

Martin Karásek

[pieterh]

try clearing your browser cache first!

this is mentioned in most release notes when doing an upgrade

especially with minor upgrades where cached modules are "almost" the same........

[patoberli]

You happen to use Chrome? I have the same issue and switched to Edge. I am typically to lazy to clear the cache, so I assume that's the source of the problem. 

[Rich R]

Or if you have https redirection enabled ... https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/115951-web-auth-wlc-guide-00.html

"Be aware that this is resource consuming for the WLC in case many HTTPS requests are sent. It is advised not to use this feature before WLC version 8.7 where the scalability of this feature was enhanced."

See the link for more detail but it has dreadfully poor performance.

It doesn't only affect webauth requests, it also severely degrades the management GUI causing exactly the symptoms you describe.