Wired Intelligent Edge

Can any one please tell me how ro configure WEB GUI access on aruba 2930F swicth?

---

@Jarvis wrote:

Can any one please tell me how ro configure WEB GUI access on aruba 2930F swicth?

---

You only need to set a ip address to switch

by default the HTTP is enable !

Greetings!

As noted by alagoutte, plaintext HTTP Web UI access is enabled by default; an IP address must be configured on the switch and there must be basic IP reachability between the switch and the client.

For secure Web access using TLS/SSL, a certificate must be installed on the switch before this capability can be enabled. To generate a self-signed certificate for testing purposes (not recommended for live production environments), follow the process documented in the Basic Operation Guide for ArubaOS-Switch. To generate a cryptographically-signed certificate using a trusted Certificate Authority (for production environments), use the procedure from the ArubaOS-Switch Hardening Guide.

Found a work around...

Hi,

Can you help me ,

I am able to login but it is in white screen

Can you share some guide line to checks

Thanks

Debabarta

Hi,

What browser do you are using ?

Hi

Google Chrome-Version 80.0.3987.116 (Build officiel) (64 bits)

Internet Explorer 11

Please let me know for any additional information 

Thanks 

XXXX-SW1# sh flash
Image Size (bytes) Date Version
----------------- ------------ -------- --------------
Primary Image : 29335147 11/19/18 WC.16.07.0003
Secondary Image : 29335147 11/19/18 WC.16.07.0003

Boot ROM Version
----------------
Primary Boot ROM Version : WC.16.01.0005
Secondary Boot ROM Version : WC.16.01.0005

Default Boot Image : Primary
Default Boot ROM : Primary

What the web-management configuration ?

Hi 

No SSL only http

password operator user-name "operator" plaintext "password"
password manager user-name "admin" plaintext "password"

IP address is configured in VLAN 

Getting the following error

do you have try to make erase config ? (and upgrade to last firmware ?)

Hi

Thank you for your quick response .Will check and let you know

I was able to find a work around.  By default the http is enabled and if you have not configured any password before then it would automatically bring you to the admin level.

But to be safe, first login to the CLI:

conf t
 password operator user-name "operator" plaintext "password"
 password manager user-name "admin" plaintext "password"
# http login will use admin or operator straight away no need for admin@system
wr mem
# OR
save

 http://IP address of switch
 username: admin
 password: password
 click head icon and change to classic GUI
 Under Security > SSL > Certificate Requests
 Click Self-Signed Certificate
 Certificate Name: switch name or whatever you want to put
 Key Size: 2048
 Validity End Date: 2 years or whatever years you want to put > Click drop down arrow and choose 2021 then click date and ok
 Common Name CN: I just put the same name as Certificate Name
 Organizational Unit Name: Up to you
 Organization: up to you
 Locality: up to you
 State: up to you
 Country: up to you
 Click Install
 
 Security > SSL > Web Management > Change
 Tick enable
 SSL Port: 443
 Tick require SSL
 
 Click Save
 Test by logging in https://IP address of switch

You can also generate certificate using CLi

crypto pki enroll-self-signed certificate-name .....

Yep, but there seems a lot of steps involved in the CLI and there is not a clear how to step by step commands on the internet... So I tried the workaround for now.

Also, can the following commands be executed with a cut and paste in order to create a cli script or template for the self-signed Certificate?

Ex:

ArubaOS-Switch(config)# crypto pki enroll-self-signed certificate-name switch1 subject

Enter Common Name(CN) : switch1
Enter Org Unit(OU) : NetworkOperations
Enter Org Name(O) : My Company
Enter Locality(L) : CHI
Enter State(ST) : IL
Enter Country(C) :US

How can I access the switch ip address if its in another subnet than what I am on? I have a network that is only used as mgmt of devices. Firewall rules on my end permit m,e to access but the Aruba switch will only let me access management if I am in the same network. For example, I am on 10.10./16 network, Mgmt network is 172.16.30.x/24. I can fully access anything on 172 networks based on my rules on the third-party firewall, but the Aruba switch will not allow me to manage the switch from 172.16 networks unless I am on that network. Any suggestions? I've setup Ip authorizations, they seem to not be of any help. What in the Aruba is preventing this?

You need a routing to access IPs outside of your subnet.

try "ip default-gateway X.X.X.X" on the switch.