Web System Login Failure
Fault Symptom
A switch and a client can ping each other, but the client cannot log in to the web system.
Procedure
- Check whether the HTTPS service is enabled.
HTTPS IPv4:
By default, the HTTPS IPv4 service function is enabled. You can run the display this command in the system view to check whether undo http secure-server enable is configured. If so, the HTTPS IPv4 service function is manually disabled.
To enable the HTTPS IPv4 service function, run the http secure-server enable command in the system view.
HTTPS IPv6:
By default, the HTTPS IPv6 service function is enabled. To enable the HTTPS IPv6 service function, run the http ipv6 secure-server enable command in the system view.
- Check whether the number of online web users reaches the upper limit.
Run the display http user command on the switch to check whether the number of online web users reaches 5.
Currently, the switch supports a maximum of five concurrent online web users. To force the idle user offline and thereby release the occupied web channel resources, allowing other users to log in, run the free http user-id user-id command.
- Check whether an ACL is configured on the switch to control access of web users.
HTTPS IPv4:
Run the display this command in the system view to check whether http acl acl-number is configured. If so, record the acl-number.
Run the display acl acl-number command in any view to check whether the IPv4 address of the web client is denied in the ACL. If the IPv4 address is denied, run the undo rule rule-id command in the ACL view to delete the deny rule and run the rule permit source source-address source-wildcard command to change the ACL for allowing the web client to access the switch.
HTTPS IPv6:
Run the display this command in the system view to check whether http ipv6 acl acl6-number is configured. If so, record the acl6-number.
Run the display acl ipv6 acl6-number command in any view to check whether the IPv6 address of the web client is denied in the ACL. If the IPv6 address is denied, run the undo rule rule-id command in the ACL6 view to delete the deny rule and run the rule permit source source-address source-wildcard command to change the ACL for allowing the web client to access the switch.
- Check whether the access type of the web user is correct.
Run the display this command in the AAA view to check whether the access type of the web user is HTTP. If the local-user user-name service-type http command is configured, the access type of the user whose user name is user-name is HTTP; if the command is not configured, run the local-user user-name service-type http command in the AAA view to set the access type of the web user to HTTP.