02-23-2021 04:24 PM
The newest secure firmware I can find for the ERS 3500 series is 5.3.12 which was released relatively recently. It still has the known issue of being unable to access through any modern web browsers, which is hardly secure at all. Is there a newer firmware that I’m unaware of and is this going to be resolved?
02-24-2021 06:36 PM
Quick update: i spoke with a colleague.
If you load a signed cert to the switch the browser should start to work.
The root of the issue is that browsers no longer accept self signed certs. Which is what is loaded on the ERS3500.
02-24-2021 03:35 PM
I will ask internally. but you should also reach out to your Extreme SE or open a non-critical ticket.
As for enabling SSH but having HTTPS disabled you need to do the following.
Disable SSH.
NO SSH.
Enable SSH password security
SSH PASS-AUTH
Enable SSH
SSH
Then DON”T re-enable SSH SECURE mode
SSH SECURE FORCE /////// DON”T DO THIS!!!!!! This command forces all services to secure mode.
Then toggle your browser off/on
NO WEB-SERVER EN
WEB-SERVER EN
Your browser will now be open for HTTP and remote login will support SSH.
!!!!!!!!!!!This is undesirable!!!!!!!!!!
I don’t condone this.
02-24-2021 03:15 PM
Do you happen to know if that will be resolved? Not being able to use HTTPS is kind of a big issue for a switch still being updated.
Also, how were you able to enable SSH without the full secure mode? If I put the latest secure image on the 3500 and enable secure mode it seems to force HTTPS. Is there a way to enable SSH without secure mode?
02-23-2021 06:02 PM
You are correct, None of my browsers work once I enabled HTTPS mode.