Unable to access Web GUI for Mobility Express Aironet AP 2802i

[ahmedaburaihan]

Hello Community
I have an Aironet 2802i Access point, I converted it into Mobility Express (Autonomous/Standalone) by transfering files from TFTP server. I configured settings using CLI Wizard, such as MGMT IP, time, country code etc. 

I can ping AP Mgmt IP from my PC and vice versa. 

The Problem is that i am unable to access WEB GUI to My Access Point (which is also funktioning as controller). 

Thank you for an idea! 

[ahmedaburaihan]

@marce1000 I get no error, neither any https response code. I did not configure ip http-server on WLC because this command does not exist in Controller Config>

[RxTx]

Hi,

ME AP has 2 IP's one for AP and one for ME-WLC, what IP do you try to access AP or ME-WLC ? Try the another IP... you can see it in DHCP server.

If you are still unsuccessful HW factory reset 2802 from button and try to config again from web interface via WIFI connection and this time let DHCP server to assign both IP's.

[ahmedaburaihan]

@RxTx I did the same. When i run "show interface summary" command it shows me MGMT IP which I Configured, there is not option to see the IP for AP. i tried to access Management IP which I configured during CLI Wizard. 

[RxTx]

If you put MGMT IP in another segment than your laptop and AP you can have problems connecting ( if switch it is not configured properly )... so change it.

If you are connected to AP on terminal also please check this command and show the result:

sh lldp inline_power

[marce1000]

                 >... it shows me MGMT IP which I Configured,
  - Can you ping that IP from the web-client you intend to use for accessing the  GUI ?

 M.

[RxTx]

This is interesting... how can you ping from web-client/browser ?

[ahmedaburaihan]

@RxTx See the Diagram, very simple and basic. 
Laptop with IP address of 192.168.1.100 and AP/Controller MGMT IP is 192.168.1.200 which i configured during CLI Wizard at first after converting to Mobility Express. They can ping each other:
AP/Controller> ping 192.168.1.100 (Success!!!!!)
Laptop CMD> ping 192.168.1.200 (Success!!!!!) 
Browser: https://192.168.1.200 
Failed....to open GUI 

[RxTx]

So you config ME from CLI and not from WEB as requested; in this case I am waiting for you to display result from commands:

show version

show lldp inline_power

p.s.

I just configured 2802-ME few hours ago from web interface not from CLI and no surprise, it worked for me.

[RxTx]

Use console cable and check the full log after boot;

here it is the last part of log from a converted ME with good access to web interface ( http it is disabled by default so you need https to acces it

Starting Switchdriver...

Cryptographic library self-test....
Testing SHA1 Short Message 1
Testing SHA256 Short Message 1
Testing SHA384 Short Message 1
SHA1 POST PASSED
Testing HMAC SHA1 Short Message 1
Testing HMAC SHA2 Short Message 1
Testing HMAC SHA384 Short Message 1
passed!

XML config selected
Starting SSHD: ok
Starting Redis-Server: ok
Starting naconnector: ok
Starting nginx: ok
Starting NA Connector...
Validating XML configuration
creating logs dir
Starting DB Services...
Cisco is a trademark of Cisco Systems, Inc.
Software Copyright Cisco Systems, Inc. All rights reserved.

Cisco AireOS Version 8.10.196.0
Initializing OS Services: ok
Initializing Serial Services: ok
Initializing Network Services: ok
Starting Statistics Service: ok
Unable to open dx flag file
Starting ARP Services: ok
Starting Trap Manager: ok

Starting Data Externalization services: ok
Starting Network Interface Management Services: ok
Starting System Services: ok
Starting SNMP services: ok
Starting Fastpath Hardware Acceleration: Starting Switching Services: ok
Starting QoS Services: ok
Starting Policy Manager: ok
Starting Data Transport Link Layer: ok
Starting Access Control List Services: ok
Starting System Interfaces: ok
Starting Client Troubleshooting Service: ok
Starting Certificate Database: Initializing Curl Globally..
ok
Starting VPN Services: ok
Starting Management Frame Protection: ok
Starting DNS Services: ok
Starting Secure Tunnelling Services: ok 
ok
Starting LWAPP: ok
Starting CAPWAP: ok
Starting LOCP: ok 
Starting Security Services: ok
Starting OpenDNS Services: ok
Starting Policy Manager: ok
Starting Authentication Engine: ok


Starting Capwap Ping Component: ok
Starting AVC Services: ok
Starting AVC Flex Services: ok
Starting Virtual AP Services: ok
Starting AireWave Director: open rrm: not able to ipv4 by pass rule ok
Starting Network Time Services: ok
Starting Cisco Discovery Protocol: ok
Starting Broadcast Services: ok
Starting Logging Services: ok
Starting DHCP Server: ok
Starting IDS Signature Manager: ok
Starting RFID Tag Tracking: ok
Starting RF Profiles: ok
Starting Mesh Services:  ok
Starting TSM: ok
Starting CIDS Services: ok
Starting DTLS server:  enabled in CAPWAP
Starting CleanAir: ok
Starting WIPS: ok 
Starting SSHPM LSC PROV LIST: ok 
Starting RRC Services: ok
Starting Alarm Services: ok
Starting FMC HS: ok 
Starting FLEXEXPRESS ConfigSync Task: ok
Starting Hotspot Services: ok
Starting HTTP Image Download Task: ok
Starting Tunnel Services New: ok
Starting mDNS Services: ok
Starting Management Services: 
Starting IPSec Profiles component: ok
   Web Server:    CLI:    Secure Web: ok

(Cisco Controller) 

Enter User Name (or 'Recover-Config' this one-time only to reset configuration to factory defaults)

[ahmedaburaihan]

@marce1000 Yes I can ping from Client to MGMT IP and vice versa. 
Actually when I converted AP to Mobility Express, now after the reset it shows me directly the Controller Prompt. In this prompt I can run commands such as Config, Show, Troubleshoot etc. So the only problem is I cannot access Web GUI of the AP/Controller. 

[marce1000]

   -  Could you also try with both https and simple http ?

       >....I get no error, neither any https response code.
      So what does the browser then say in the end ? Is it site unreachable or something else ?

 M.

[ahmedaburaihan]

@marce1000 Browser shoes white screen with loading continuously. No login prompt, nothing. I also did a Wireshark capture to the interface to see 80,443 clues, couldn't find.

[marce1000]

         >...I also did a Wireshark capture to the interface to see 80,443 clues, couldn't find.
        -  Did the  Wireleshark capture contain any content ? 

         + Could you use Google Chrome , press F12 first then connect , on the right pane you get a 
           view with various tabs above , review the content of all those tabs (after a connection attempt)
        +  From your web-client use the command(s) :
                          % nmap -p80   --reason    MGMT IP
                          % nmap -p443 --reason   MGMT IP

       + Did you download and install the correct ME software version for this model ?
          Do you use the latest (advisory) version = preferred (?)

 M.

[ahmedaburaihan]

@marce1000 I downloaded a random ME .tar and transferred. Most them needed service license or something which i do not have.