Web GUI not show - Cisco Mobility Express - Aironet 1850 series

[Welcome2008]

Hello,

I cannot access the Mobility express administration panel, i get the error ERR_EMPTY_RESPONSE.
through ssh I can login, what can I do to restore the administration panel?

Thank you in advance

[Flavio Miranda]

If you are using Chrome, try another one.  If you are not using Chrome, then, share the command from the cli:

show version

show run-config all command

[Welcome2008]

Spoiler

System Inventory
NAME: "Mobility Express" , DESCR: "Cisco Aironet 1850 Series Mobility Express"
PID: AIR-AP1852E-E-K9, VID: V03, SN: KWCXXXXXXXXXX

Burned-in MAC Address............................ 00:XX:XX:XX:XX:E0
Maximum number of APs supported.................. 50
Press Enter to continue or <ctrl-z> to abort

System Information
Manufacturer's Name.............................. Cisco Systems Inc.
Product Name..................................... Cisco Controller
Product Version.................................. 8.5.131.0

System Name...................................... ap230
System Location..................................
System Contact...................................
System ObjectID.................................. 1.3.6.1.4.1.9.1.2250
IP Address....................................... 192.168.XXX.XXX
Last Reset....................................... 0: unknown

System Up Time................................... 0 days 22 hrs 6 mins 26 secs
System Timezone Location......................... (GMT +1:00) Amsterdam, Berlin, Rome, Vienna
System Stats Realtime Interval................... 5
System Stats Normal Interval..................... 180

Configured Country............................... IT - Italy

State of 802.11b Network......................... Enabled
State of 802.11a Network......................... Enabled
Number of WLANs.................................. 1

--More or (q)uit current module or <ctrl-z> to abort
Number of Active Clients......................... 5

OUI Classification Failure Count................. 0

Burned-in MAC Address............................ 00:XX:XX:XX:E0
Maximum number of APs supported.................. 50
System Nas-Id....................................
WLC MIC Certificate Types........................ SHA1/SHA2
Press Enter to continue or <ctrl-z> to abort

Backup Controller Configuration

AP primary Backup Controller ....................
AP secondary Backup Controller ..................
Press Enter to continue or <ctrl-z> to abort

System Time Information:

Time............................................. Tue Mar 15 17:01:35 2022

Timezone delta................................... 0:0
Timezone location................................ (GMT +1:00) Amsterdam, Berlin, Rome, Vienna

NTP Servers
NTP Version.................................. 3
NTP Polling Interval......................... 86400

Index NTP Key Index NTP Server Status NTP Msg Auth Status
------- ---------------------------------------------------------------------
1 0 0.ciscome.pool.ntp.org In Sync AUTH DISABLED
2 0 1.ciscome.pool.ntp.org Not Tried AUTH DISABLED
3 0 2.ciscome.pool.ntp.org Not Tried AUTH DISABLED

Press Enter to continue or <ctrl-z> to abort

Redundancy Information
Redundancy Mode ................................. SSO DISABLED
Local State...................................... ACTIVE
Peer State....................................... N/A
Unit............................................. Primary
Unit ID.......................................... 00:XX:XX:XX:XX:E0
Redunadancy State................................ N/A
Mobility MAC..................................... 00:XX:XX:XX:XX:E0
Redundancy Management IP Address................. 0.0.0.0
Peer Redundancy Management IP Address............ 0.0.0.0
Redundancy Port IP Address....................... 0.0.0.0
Peer Redundancy Port IP Address.................. 169.254.0.0
Press Enter to continue or <ctrl-z> to abort

AP Bundle Information not supported.
Press Enter to continue or <ctrl-z> to abort

Switch Configuration
802.3x Flow Control Mode......................... Disable
FIPS prerequisite features....................... Disabled
WLANCC prerequisite features..................... Disabled
UCAPL prerequisite features...................... Disabled
DTLS WLC MIC .................................... SHA2
secret obfuscation............................... Enabled
Strong Password Check Features
case-check.................................... Enabled
consecutive-check............................. Enabled
default-check................................. Enabled
username-check................................ Enabled
position-check................................ Enabled
case-digit-check.............................. Enabled
Min. Password length.......................... 3
Min. Upper case chars......................... 0
Min. Lower case chars......................... 0
Min. Digits chars............................. 0
Min. Special chars............................ 0
Mgmt User
Password Lifetime [days]...................... 0
Password Lockout.............................. Disabled

--More or (q)uit current module or <ctrl-z> to abort
Lockout Attempts.............................. 3
Lockout Timeout [mins]........................ 5
SNMPv3 User
Password Lifetime [days]...................... 0
Password Lockout.............................. Disabled
Lockout Attempts.............................. 3
Lockout Timeout [mins]........................ 5
Press Enter to continue or <ctrl-z> to abort

Network Information
RF-Network Name............................. ap230
DNS Server IP1.............................. 208.67.222.222
DNS Server IP2.............................. 208.67.220.220
Web Mode.................................... Disable
Secure Web Mode............................. Enable
Secure Web Mode Cipher-Option High.......... Disable
Secure Web Mode SSL Protocol................ Disable
OCSP........................................ Disabled
OCSP responder URL..........................
Secure Shell (ssh).......................... Enable
Secure Shell (ssh) Cipher-Option High....... Disable
Telnet...................................... Disable
Ethernet Multicast Forwarding............... Disable
Ethernet Broadcast Forwarding............... Disable
IPv4 AP Multicast/Broadcast Mode............ Multicast Address : 0.0.0.0
IPv6 AP Multicast/Broadcast Mode............ Multicast Address : ::
IGMP snooping............................... Disabled
IGMP timeout................................ 60 seconds
IGMP Query Interval......................... 20 seconds
MLD snooping................................ Disabled
MLD timeout................................. 60 seconds

--More or (q)uit current module or <ctrl-z> to abort
MLD query interval.......................... 20 seconds
User Idle Timeout........................... 300 seconds
ARP Idle Timeout............................ 300 seconds
Cisco AP Default Master..................... Disable
AP Join Priority............................ Disable
Mgmt Via Wireless Interface................. Disable
Mgmt Via Dynamic Interface.................. Disable
Bridge MAC filter Config.................... Enable
Bridge Security Mode........................ EAP
Mesh Full Sector DFS........................ Enable
Mesh Backhaul RRM........................... Disable
AP Fallback ................................ Enable
AP EasyAdmin ............................... Disable
AP Virtual IP .............................. 0.0.0.0
Web Auth CMCC Support ...................... Disabled
Web Auth Redirect Ports .................... 80
Web Auth Proxy Redirect ................... Disable
Web Auth Captive-Bypass .................. Disable
Web Auth Secure Web ....................... Enable
Web Auth Secure Web Cipher Option ......... Disable
Web Auth Secure Web Sslv3 ................. Disable
Web Auth Secure Redirection ............... Disable
Fast SSID Change ........................... Enabled

--More or (q)uit current module or <ctrl-z> to abort
IP/MAC Addr Binding Check .................. Enabled
Link Local Bridging Status ................. Disabled
CCX-lite status ............................ Disable
oeap-600 dual-rlan-ports ................... Disable
oeap local-network ......................... Enable
oeap-600 Split Tunneling (Printers)......... Disable
WebPortal Online Client .................... 0
WebPortal NTF_LOGOUT Client ................ 0
mDNS snooping............................... Disabled
mDNS Query Interval......................... 0 minutes
Web Color Theme............................. Default
Capwap Prefer Mode.......................... IPv4
Network Profile............................. Disabled
Client ip conflict detection (DHCP) ........ Disabled
Mesh BH RRM ................................ Disable
Mesh Aggressive DCA......................... Disable
Mesh Auto RF................................ Disable
HTTP Profiling Port......................... 80
HTTP-Proxy Ip Address....................... 0.0.0.0
HTTP-Proxy Port............................. 80
WGB Client Forced L2 Roam................... Disabled

This is the result of run-config

[Welcome2008]

someone help me?

[Flavio Miranda]

Web Mode.................................... Disable

Are you  trying to access using HTTP or HTTPS ? You might use HTTPS.

[Welcome2008]

I use Https but the response is ERR_EMPTY_RESPONSE.

How i change the value of Web Mode ?

[Flavio Miranda]

try 'ip http server'

Use ? to guide you, mabe this command can change from pratform to platform.

[Welcome2008]

with http is the same thing, ERR_EMPTY_RESPONSE

i have use Firefox, Edge, Chrome, other browser ?

[Welcome2008]

I have change web mode to enable

Network Information
RF-Network Name............................. ap230
DNS Server IP1.............................. 208.67.222.222
DNS Server IP2.............................. 208.67.220.220
Web Mode.................................... Enable
Secure Web Mode............................. Enable
Secure Web Mode Cipher-Option High.......... Disable
Secure Web Mode SSL Protocol................ Disable
OCSP........................................ Disabled
OCSP responder URL..........................
Secure Shell (ssh).......................... Enable
Secure Shell (ssh) Cipher-Option High....... Disable
Telnet...................................... Disable
Ethernet Multicast Forwarding............... Disable
Ethernet Broadcast Forwarding............... Disable
IPv4 AP Multicast/Broadcast Mode............ Multicast   Address : 0.0.0.0
IPv6 AP Multicast/Broadcast Mode............ Multicast   Address : ::
IGMP snooping............................... Disabled
IGMP timeout................................ 60 seconds
IGMP Query Interval......................... 20 seconds
MLD snooping................................ Disabled
MLD timeout................................. 60 seconds

but the result on browser is the same.

after change the value of web mode, what i should i do ? 

[Flavio Miranda]

do a test please.

telnet "wlc ip" 80

from your machine. Telnet may be not enabled then you need to enable it. Let´s see if the problem is on the wlc or somewhere else.

[Welcome2008]

with telnet, the result is a black screen (empty response ?).

HTTP/1.1 400 Bad Request
Date: Thu, 17 Mar 2022 16:05:20 GMT

400 Bad Request

i wanted to try with wireshark and the tcp stream contains just the header ....

this the result of http request...

GET / HTTP/1.1
Host: 192.168.xxx.xxx
Connection: keep-alive
Cache-Control: max-age=0
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/99.0.4844.51 Safari/537.36 Edg/99.0.1150.39
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: it,it-IT;q=0.9,en;q=0.8,en-GB;q=0.7,en-US;q=0.6

[Flavio Miranda]

I think something is not ok with the wlc. I´d updrade it just to make sure. The black screen means the wlc accepted the telnet connection which means it is listening on the http port and which means it should allow you web access.

[Welcome2008]

Can you give me a guide to upgrade the wlc ?

[Rich R]

https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-2/b_Mobility_Express_Deployment_guide/b_Mobility_Express_Deployment_guide_chapter_01000.html#task_4387C8D3ADCA4D9EA365763A1DA5B2E2

But before upgrade try a factory default reset on the AP then follow the config prompts on the console.  Make sure you respond fully to all prompts to ensure it is configured correctly.

[Welcome2008]

Can I reset without dismount the devices? The devices are currently positioned at a height of 8 meters.

Can I easily reconfigure them? can I save the configuration? and then restore it?