Turn on http for a 3550

[RNF0528]

Can anyone tell me how to turn on access to a switch via internet explorer?

 

[jdeisenm]

After you login.
Go to global config mode.
Here is the command.

ip http server

 

[mccullrr]

I'm having a problem with my access points and web access. I have entered that command ip http server, but am still unable to access via http.

Any ideas??

Thanks,
Becky

 

[RNF0528]

Turn on SNMP.

 

[mccullrr]

Thanks...

I have
snmp-server community xxxxx ro
snmp-server community xxxxx rw
snmp-server enable traps tty

And still not working....

Any other ideas or do you see what I am missing??

Thanks,
Becky

 

[RNF0528]

Save your config and post it. Remeove any info you dont want posted but leave the body of it...

 

[mccullrr]

Thanks. Here it is...


no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname xxxx
!
logging queue-limit 100
enable secret 5
enable password 7
!
username #### privilege 15 password 7
ip subnet-zero
no ip domain lookup
!
aaa new-model
!
!
aaa group server radius rad_eap
server 10.1.33.3 auth-port 1812 acct-port 1813
!
aaa group server radius rad_mac
server 10.1.255.250 auth-port 1645 acct-port 1646
!
aaa authentication login default local
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods group rad_mac
aaa session-id common
!
!
bridge irb
!
!
interface Dot11Radio0
no ip address
ip helper-address 10.1.255.251
no ip route-cache
!
encryption mode ciphers ckip-cmic
!
encryption vlan 533 key 1 size 128bit 7
encryption vlan 533 key 2 size 128bit 7 transmit-key
encryption vlan 533 mode ciphers ckip-cmic
!
ssid Boyd
vlan 331
authentication open mac-address mac_methods
guest-mode
!
ssid tsunami
vlan 533
authentication open
authentication network-eap eap_methods
authentication key-management cckm
!
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0
rts threshold 2312
channel 2437
antenna receive right
antenna transmit right
station-role root
!
interface Dot11Radio0.1
encapsulation dot1Q 1
no ip route-cache
!
interface Dot11Radio0.331
encapsulation dot1Q 331
no ip route-cache
bridge-group 3
bridge-group 3 subscriber-loop-control
bridge-group 3 block-unknown-source
no bridge-group 3 source-learning
no bridge-group 3 unicast-flooding
bridge-group 3 spanning-disabled
!
interface Dot11Radio0.533
encapsulation dot1Q 533 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
!
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
!
interface FastEthernet0.1
encapsulation dot1Q 1
no ip route-cache
!
interface FastEthernet0.331
encapsulation dot1Q 331
no ip route-cache
bridge-group 3
no bridge-group 3 source-learning
bridge-group 3 spanning-disabled
!
interface FastEthernet0.533
encapsulation dot1Q 533 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
!
interface BVI1
ip address 10.1.33.4 255.255.255.0
no ip route-cache
!
ip http server
ip http help-path

http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/ea0

ip radius source-interface BVI1
snmp-server community xxxxx RO
snmp-server community xxxxxx RW
no snmp-server enable traps tty
radius-server attribute 32 include-in-access-req format %h
radius-server host 10.1.255.250 auth-port 1645 acct-port 1646 key 7 02050D480809
radius-server authorization permit missing Service-Type
radius-server vsa send accounting
bridge 1 route ip
!
wlccp authentication-server client mac mac_methods
!
wlccp ap username xxxx password 7
!
line con 0
password 7
line vty 0 4
password 7
line vty 5 15
!
end

 

[RNF0528]

Try enabling this line...

no snmp-server enable traps tty

change to

snmp-server enable traps tty

See if this helps

 

[mccullrr]

No luck. Any other ideas??

Becky

 

[RNF0528]

Try looking at this.

http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag/123-04.JA/1100/h_ap_services_snmp.htm

Make sure your traps are set up properly and make sure your community is set properly.

--- Worst case if you run express setup from the command line it will walk you through the basic setup process. -----

 

[mccullrr]

Thanks RNF0528. I'll take a look at that. What is mind boggling is that I have another AP that is configured the exact same way and it works.

 

[RNF0528]

I know the feeling. When all else fails I go back and start from scratch and load the setup feature and normally works. Good luck and let me know what you come up with...

 

[jdeisenm]

Does your AP have an image that supports the http server?
Is is the same version as the ap that is working?
You should be able to see the http server directory structure in your flash.

 

[mccullrr]

Yep..... It is all the same.

 

[mccullrr]

Figured it out. It was an acl blocking it.

 

[jneiberger]

RNF0528, I'm interested to know why you think SNMP traps have anything to do with accessing the switch via HTTP. Can you explain a bit more what you were thinking?

 

[RNF0528]

I have a bunch of AP`s that are running and I was tring to match up the config`s just in case we missed something. I know that normally it doesn`t matter and all yo need it SNMP turned on... But when all else fails and normal things don`t work, you try abnormal and it can lead you to the problem.

 

[burtsbees]

I really don't think SNMP has a thing to do with http access. Also, I thought one had to have a username and password set on the switch, and
switch(config)#ip http authentication local
and the username and password as
switch(config)#username blabla priv 15 secret boohoo
Or is this just a router? Never used the GUI myself, but it's good to know.

Burt

 

[jneiberger]

SNMP doesn't have anything to do with HTTP access. I just wanted to find out why the respondent thought it might help. I was trying to be professorial.

 

[burtsbees]

I know---I was agreeing with you---I should have stated that I was reiterating what you said. Sorry.

Burt