Header Only - DO NOT REMOVE - Extreme Networks
Question

Unable To Enable HTTP


I am unable to enable the http feature on our X450-stack of switches. I have tried the enable web http, but enable web is not a valid option.

Slot-1 Stack.15 # enable ?
access-list Access list
bootp Configure BOOTP client
bootprelay Enable bootp relay service
cli Command Line Interface settings
cli-config-logging CLI command logging
clipaging Display command output one screenful at a time
cpu-monitoring Monitor system/process cpu utilization
dhcp Configure DHCP client
diffserv diffserv
dos-protect automatic denial-of-service protection
dot1p dot1p
eaps EAPS (Ethernet Automatic Protection Switching) domain
edp EDP
elrp-client ELRP (Extreme Loop Recovery Protocol) Client
elsm ELSM (Extreme Link Status Monitoring)
esrp ESRP (Extreme Standby Router Protocol) Domain
flooding flooding
icmp icmp option
idletimeout Timeout for idling configuration session
igmp IGMP Protocol
inline-power Inline-Power
ip-option ip option
ip-security IP Security
iparp ip arp command
ipforwarding IP Forwarding
ipmcforwarding IP Multicast Forwarding
iproute IPROUTE HELP
irdp ICMP Router Discovery Protocol
jumbo-frame jumbo-frame
learning learning
license EXOS license or feature pack
lldp Configure LLDP specific settings
log Configure log service
loopback-mode loopback
mac-lockdown-timeout mac lockdown timeout
mirroring mirroring
mld Multicast Listener Discovery Protocol
mvr Multicast VLAN Registration
netlogin Configure Network Login specific settings
ports port
radius Radius Client
radius-accounting Radius Client Accounting
rip RIP Routing
r.png R.png Routing
rmon RMON CLI command
router-discovery IPv6 Router Discovery
sflow Enable SFLOW module
sharing sharing
slot slot number
smartredundancy smart redundancy on a port(related to Software redundant port feature)
snmp Configure SNMP specific settings
sntp-client Enable Sntp client
stacking Stacking
stpd STP domain
sys-health-check System health check
syslog Configure syslog service
tacacs TACACS+ Client
tacacs-accounting TACACS+ Client Accounting
tacacs-authorization TACACS+ Client Cli Authorization
telnet allow incoming telnet connections
udp-echo-server Enable a UDP-Echo Server
upm Universal port manager
vlan VLAN configuration
watchdog watchdog monitoring feature
xml-cli Cli based XML configuration mode
xml-mode Raw XML configuration mode

Any one have any ideas? We are preparing for a conversion to another vendor, and we need to be able to login to the Gui to get some information for them. Thanks for the help.

Just some info on the switches:

Slot-1 Stack.17 # show switch
SysName: Stack
SysLocation:
SysContact: support@extremenetworks.com, +1 888 257 3000
System MAC: 02:04:96:36:B5:0F
System Type: X450e-48p (Stack)

SysHealth check: Enabled (Normal)
Recovery Mode: All
System Watchdog: Enabled

Current Time: Tue Mar 7 15:17:49 2017
Timezone: [Auto DST Disabled] GMT Offset: 0 minutes, name is UTC.
Boot Time: Tue Nov 22 13:52:01 2016
Boot Count: 24
Next Reboot: None scheduled
System UpTime: 105 days 1 hour 25 minutes 48 seconds

Slot: Slot-1 * Slot-2
------------------------ ------------------------
Current State: MASTER BACKUP (In Sync)

Image Selected: primary primary
Image Booted: primary primary
Primary ver: 12.0.3.16 12.0.3.16
Secondary ver: 12.0.3.16 12.0.3.16

Config Selected: secondary.cfg
Config Booted: primary.cfg

secondary.cfg Created by ExtremeXOS version 12.0.3.16
282660 bytes saved on Thu Dec 8 10:53:44 2016
primary.cfg Created by ExtremeXOS version 12.0.3.16
282660 bytes saved on Thu Dec 8 10:53:12 2016

10 replies

Slot-1 Stack.18 # show management CLI idle timeout : Enabled (20 minutes)
CLI max number of login attempts : 3
CLI max number of sessions : 8
CLI paging : Enabled (this session only)
CLI space-completion : Disabled (this session only)
CLI configuration logging : Disabled
CLI scripting : Disabled (this session only)
CLI scripting error mode : Ignore-Error (this session only)
CLI persistent mode : Persistent (this session only)
Telnet access : Enabled (tcp port 23 vr all)
: Access Profile : not set
SSH Access : ssh module not loaded.
Web access : Disabled (tcp port 80)
Total Read Only Communities : 2
Total Read Write Communities : 1
RMON : Disabled
SNMP access : Enabled
: Access Profile Name : not set
SNMP Traps : Enabled
SNMP v1/v2c TrapReceivers : None

SNMP stats: InPkts 54359769OutPkts 54359769Errors 8130 AuthErrors 0
Gets 45777692GetNexts 8581671 Sets 0
SNMP traps: Sent 0 AuthTraps Enabled
Jason Shaffer wrote:

Slot-1 Stack.18 # show management CLI idle timeout : Enabled (20 minutes)
CLI max number of login attempts : 3
CLI max number of sessions : 8
CLI paging : Enabled (this session only)
CLI space-completion : Disabled (this session only)
CLI configuration logging : Disabled
CLI scripting : Disabled (this session only)
CLI scripting error mode : Ignore-Error (this session only)
CLI persistent mode : Persistent (this session only)
Telnet access : Enabled (tcp port 23 vr all)
: Access Profile : not set
SSH Access : ssh module not loaded.
Web access : Disabled (tcp port 80)
Total Read Only Communities : 2
Total Read Write Communities : 1
RMON : Disabled
SNMP access : Enabled
: Access Profile Name : not set
SNMP Traps : Enabled
SNMP v1/v2c TrapReceivers : None

SNMP stats: InPkts 54359769OutPkts 54359769Errors 8130 AuthErrors 0
Gets 45777692GetNexts 8581671 Sets 0
SNMP traps: Sent 0 AuthTraps Enabled

enable netlogin web-based
enable web https (you may have to config ssl cert, if you do, then next line)
configure ssl certificate hash-algorithm sha512

save config

show netlogin #to confirm netlogin auth mode web-based is ENABLED



note that i had to create a new admin account to login. the existing one worked for ssh but not for xml (web-based).
create account admin #you will be prompted for password.

this was done on an X460G2:
X460G2-24p-G4.42 # show version
Switch : 800606-00-05 1523N-44540 Rev 5.0 BootROM: 1.0.2.1 IMG: 16.1.2.14
PSU-1 : Internal PSU-1 800592-00-07 1522A-45204
PSU-2 :

Image : ExtremeXOS version 16.1.2.14 by release-manager
on Tue Oct 6 19:03:00 EDT 2015
BootROM : 1.0.2.1
Diagnostics : 3.1

good luck.
Jason Shaffer wrote:

Slot-1 Stack.18 # show management CLI idle timeout : Enabled (20 minutes)
CLI max number of login attempts : 3
CLI max number of sessions : 8
CLI paging : Enabled (this session only)
CLI space-completion : Disabled (this session only)
CLI configuration logging : Disabled
CLI scripting : Disabled (this session only)
CLI scripting error mode : Ignore-Error (this session only)
CLI persistent mode : Persistent (this session only)
Telnet access : Enabled (tcp port 23 vr all)
: Access Profile : not set
SSH Access : ssh module not loaded.
Web access : Disabled (tcp port 80)
Total Read Only Communities : 2
Total Read Write Communities : 1
RMON : Disabled
SNMP access : Enabled
: Access Profile Name : not set
SNMP Traps : Enabled
SNMP v1/v2c TrapReceivers : None

SNMP stats: InPkts 54359769OutPkts 54359769Errors 8130 AuthErrors 0
Gets 45777692GetNexts 8581671 Sets 0
SNMP traps: Sent 0 AuthTraps Enabled

Slot-1 Stack.33 # enable netlogin web-based ERROR: No NetLogin VLAN is configured.

Configuration failed on backup MSM, command execution aborted!
Userlevel 6
Hello Jason,

This probably has something to do with the code running on the switch. I would have to do some digging but they may not of had a web gui on 12.0. I would recommend upgrading and try again.
This used to work at one point. However late in 2016 there was an accidental wiping of the switch and it was restored from a backup copy. Ever since then, the web GUI has not worked. I will see if upgrading the code is an option for us or not.
Userlevel 6
Hello Jason,

The command reference said this was added in 11.6. Not sure why it is not there. What information are you looking for on the web GUI that the CLI will not provide?
The conversion company requires the access. We are not super familiar with the extreme switches, so we paid a small fee for someone to convert the configuration for us. I am sure I dont have support or access to newer code to try to upgrade. Like I mentioned earlier we had this at one point, but since the reconfiguration after the accidental erasing of this switch we have not been able to hit the GUI.
Userlevel 6
I just loaded the same version on the same model and I was able to enable web http. Could you try the disable command and see if web is an option. It may need to be toggled. I am sure there were some bugs on that code so a reboot of the stack may resolve it.
Userlevel 7
Hi Jason, I hate to hear you're leaving Extreme. That said, the CLI is much more powerful and will help ensure nothing is missed. The ScreenPlay GUI provides a very simplistic view of the config and won't give you everything you may need.
I am unable to disable the web http as well.

Reply