Cannot access web-management or captive portal

[Mes12]

Hello,

Yesterday captive portal on our controller 7205 stopped working. I tried to login to web management and it's not working either. Tried with different browsers and computers.

APs work with radius client's normally.

SSH to controller works.

Controller has been restarted.

What should i try to get web-management (and captive portal) to work again?

Any help would be appreciated.

[Mes12 · Accepted solution]

Controller firmware update solved the problem.

[cjoseph]

ssh into the controller and type "show audit-trail" to see what might have been changed. 

[Craig Syme]

What version of ArubaOS are you running? Is the CWP/GUI secured with a certificate? The default certificate which has been shipped with controllers has been revoked so this maybe an issue.

Do you see any issues when running the below command?

 # show web-server profile

Have you tried restarting the service as well?

#process restart httpd

Has there been any firewall policies been applied to the management ports on the controller?

[Mes12]

audit trail shows only one line from yesterday:

webui[3870] 23:57: USER: Error Executing the Command.

no earlier changes.

[Mes12]

ArubaOS 6.5.3.0

# show web-server profile

Seems to be ok to my understanding...

Web Server Configuration
------------------------
Parameter                                          Value
---------                                                  -----
Cipher Suite Strength                         high
SSL/TLS Protocol Config                    tlsv1 tlsv1.1 tlsv1.2
Switch Certificate                                default
Captive Portal Certificate                    wlan2
IDP Certificate                                    default
Management user's WebUI access method              username/password
User absolute session timeout <30-3600> (seconds)  0
User session timeout <30-3600> (seconds)           900
Maximum supported concurrent clients <25-320>      75
Enable WebUI access on HTTPS port (443)            false
Web Skype4B Listen Protocol/Port Config            N/A
Enable bypass captive portal landing page          false
Exclude Security Headers from HTTP Response        false

# show web-server statistics 

Error in fetching statistics, Web Server is not respoding

#process restart httpd

I've tried to restart httpd and doesn't seem to help. (also restarted controller) 

Captive portal has valid certificate from public ca.

To be honest i'm not sure about webgui certificate.Only logged on using ip-address.

No firewall policies on management ports.

[Craig Syme]

Looks like the Web Server has stopped responding.

# show web-server statistics 
Error in fetching statistics, Web Server is not respoding

This is still the same issue after a reboot and a httpd service restart? This might be a known issue with the OS you are running. Maybe speak to TAC or check the release notes for a possible fix.

[Mes12]

ArubaOS 6.5.3.0

Restarted controller.

Restatred httpd service multiple times.

Issue remains.

[cjoseph]

How long ago did you change the Captive Portal Certificate?

Try changing it back like this:

config t
web-server profile
captive-portal-cert default

Nevermind.  Please open a TAC case.

[Mes12]

Cert was installed 8-9 months ago.

I tried changing to default and restarted httpd but issue still remains.

Thank you for the help anyway.

[cjoseph]

What do you see in the browser when you try to browse to the controller's web page?