RE: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled
Ah, I was thinking management, not wlan… Separate config ☺ -- Jason Cook Technology Services The University of Adelaide, AUSTRALIA 5005 Ph: +61 8 8313 4800 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Trenton Hurt Sent: Friday, 4 August 2017 10:05 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled HTTPS redirect is used for redirect over web auth https://supportforums.cisco.com/document/12398536/understanding-https-redirect-over-web-auth On Thu, Aug 3, 2017 at 8:18 PM Jason Cook mailto:jason.c...@adelaide.edu.au>> wrote: My understanding is that HTTPS Redirection is simply so the user can try connecting on http and will be automatically directed to https. Our config is below, we use https only. We don’t bother with re-direct, admins just have to remember to go to https, not http ☺ The bug only says https redirection, so it doesn’t sound like you need to go to http only. Still on .152 here, no testing yet on 160 [cid:image001.png@01D30D04.858591F0] -- Jason Cook Technology Services The University of Adelaide, AUSTRALIA 5005 Ph: +61 8 8313 4800 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] On Behalf Of Shayne Ghere Sent: Friday, 4 August 2017 3:51 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled I spoke with our Cisco Wireless team, and they said HTTPS re-direct is disabled by default and best practice. Enabling HTTPS puts a heavy load on the WLC CPU. I’m unsure why “not” enabling HTTPS is best practice, but it’s a work around for now. It’s always enabled with anything that has a front end GUI that I manage. We’re upgrading to 8.2.160.0 due to a bug in 151.0 that causes AP’s (3802, 1810W) to crash and reload with the error, “Reason for association 'AP Crashed Due To Software Failure'.” Which isn’t an ideal situation with the students moving back in a week. 160.0 fixed the bug that was found and is the only stable version that supports Flexconnect, Rlans and 802.1x without them reloading spontaneously. I have 3-5 a day that this happens to right now. From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] On Behalf Of Bibin George Sent: Thursday, August 03, 2017 12:50 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled I know this is not so secure, but our work around was enable http for management and login to the controller by http, that works great. From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Charles Francis Sent: Thursday, August 03, 2017 8:37 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled We have not hit this one specifically, but we have noticed that once we start adding AP’s and clients to an 8540, the GUI response lags significantly. CLI will lag at times as well. We have an open case right now trying to pinpoint it. From: The EDUCAUSE Wireless Issues Constituent Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Bibin George mailto:bibin.geo...@hofstra.edu>> Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Date: Thursday, August 3, 2017 at 4:03 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled Im running 8.2.160 on 8540, does anyone hit this bug yet? Terrible response from the management GUI. https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc00271/?referring_site=bugquickviewredir ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAU
Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled
HTTPS redirect is used for redirect over web auth https://supportforums.cisco.com/document/12398536/understanding-https-redirect-over-web-auth On Thu, Aug 3, 2017 at 8:18 PM Jason Cook wrote: > My understanding is that HTTPS Redirection is simply so the user can try > connecting on http and will be automatically directed to https. > > > > Our config is below, we use https only. We don’t bother with re-direct, > admins just have to remember to go to https, not http J > > > > The bug only says https redirection, so it doesn’t sound like you need to > go to http only. > > > > Still on .152 here, no testing yet on 160 > > > > > > -- > > Jason Cook > > Technology Services > > The University of Adelaide, AUSTRALIA 5005 > > Ph: +61 8 8313 4800 > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto: > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Shayne Ghere > *Sent:* Friday, 4 August 2017 3:51 AM > > > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect > enabled > > > > I spoke with our Cisco Wireless team, and they said HTTPS re-direct is > disabled by default and best practice. Enabling HTTPS puts a heavy load on > the WLC CPU. > > > > I’m unsure why “not” enabling HTTPS is best practice, but it’s a work > around for now. It’s always enabled with anything that has a front end GUI > that I manage. > > > > We’re upgrading to 8.2.160.0 due to a bug in 151.0 that causes AP’s (3802, > 1810W) to crash and reload with the error, “Reason for association 'AP > Crashed Due To Software Failure'.” Which isn’t an ideal situation with the > students moving back in a week. > > > > 160.0 fixed the bug that was found and is the only stable version that > supports Flexconnect, Rlans and 802.1x without them reloading > spontaneously. I have 3-5 a day that this happens to right now. > > > > > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto: > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Bibin George > *Sent:* Thursday, August 03, 2017 12:50 PM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect > enabled > > > > I know this is not so secure, but our work around was enable http for > management and login to the controller by http, that works great. > > > > *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [ > mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > ] *On Behalf Of *Charles Francis > *Sent:* Thursday, August 03, 2017 8:37 AM > *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU > *Subject:* Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect > enabled > > > > We have not hit this one specifically, but we have noticed that once we > start adding AP’s and clients to an 8540, the GUI response lags > significantly. CLI will lag at times as well. We have an open case right > now trying to pinpoint it. > > > > > > > > *From: *The EDUCAUSE Wireless Issues Constituent Group Listserv < > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Bibin George < > bibin.geo...@hofstra.edu> > *Reply-To: *The EDUCAUSE Wireless Issues Constituent Group Listserv < > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> > *Date: *Thursday, August 3, 2017 at 4:03 AM > *To: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" < > WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> > *Subject: *[WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect > enabled > > > > Im running 8.2.160 on 8540, does anyone hit this bug yet? > > Terrible response from the management GUI. > > > > > https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc00271/?referring_site=bugquickviewredir > > > > > > ** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > ** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > ** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > ** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > ** Participation and subscription information for this EDUCAUSE > Constituent Group discussion list can be found at > http://www.educause.edu/discuss. > > ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
RE: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled
My understanding is that HTTPS Redirection is simply so the user can try connecting on http and will be automatically directed to https. Our config is below, we use https only. We don’t bother with re-direct, admins just have to remember to go to https, not http ☺ The bug only says https redirection, so it doesn’t sound like you need to go to http only. Still on .152 here, no testing yet on 160 [cid:image001.png@01D30D04.858591F0] -- Jason Cook Technology Services The University of Adelaide, AUSTRALIA 5005 Ph: +61 8 8313 4800 From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Shayne Ghere Sent: Friday, 4 August 2017 3:51 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled I spoke with our Cisco Wireless team, and they said HTTPS re-direct is disabled by default and best practice. Enabling HTTPS puts a heavy load on the WLC CPU. I’m unsure why “not” enabling HTTPS is best practice, but it’s a work around for now. It’s always enabled with anything that has a front end GUI that I manage. We’re upgrading to 8.2.160.0 due to a bug in 151.0 that causes AP’s (3802, 1810W) to crash and reload with the error, “Reason for association 'AP Crashed Due To Software Failure'.” Which isn’t an ideal situation with the students moving back in a week. 160.0 fixed the bug that was found and is the only stable version that supports Flexconnect, Rlans and 802.1x without them reloading spontaneously. I have 3-5 a day that this happens to right now. From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>] On Behalf Of Bibin George Sent: Thursday, August 03, 2017 12:50 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled I know this is not so secure, but our work around was enable http for management and login to the controller by http, that works great. From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Charles Francis Sent: Thursday, August 03, 2017 8:37 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> Subject: Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled We have not hit this one specifically, but we have noticed that once we start adding AP’s and clients to an 8540, the GUI response lags significantly. CLI will lag at times as well. We have an open case right now trying to pinpoint it. From: The EDUCAUSE Wireless Issues Constituent Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Bibin George mailto:bibin.geo...@hofstra.edu>> Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Date: Thursday, August 3, 2017 at 4:03 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled Im running 8.2.160 on 8540, does anyone hit this bug yet? Terrible response from the management GUI. https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc00271/?referring_site=bugquickviewredir ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
RE: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled
I spoke with our Cisco Wireless team, and they said HTTPS re-direct is disabled by default and best practice. Enabling HTTPS puts a heavy load on the WLC CPU. I’m unsure why “not” enabling HTTPS is best practice, but it’s a work around for now. It’s always enabled with anything that has a front end GUI that I manage. We’re upgrading to 8.2.160.0 due to a bug in 151.0 that causes AP’s (3802, 1810W) to crash and reload with the error, “Reason for association 'AP Crashed Due To Software Failure'.” Which isn’t an ideal situation with the students moving back in a week. 160.0 fixed the bug that was found and is the only stable version that supports Flexconnect, Rlans and 802.1x without them reloading spontaneously. I have 3-5 a day that this happens to right now. *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] *On Behalf Of *Bibin George *Sent:* Thursday, August 03, 2017 12:50 PM *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU *Subject:* Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled I know this is not so secure, but our work around was enable http for management and login to the controller by http, that works great. *From:* The EDUCAUSE Wireless Issues Constituent Group Listserv [ mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU ] *On Behalf Of *Charles Francis *Sent:* Thursday, August 03, 2017 8:37 AM *To:* WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU *Subject:* Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled We have not hit this one specifically, but we have noticed that once we start adding AP’s and clients to an 8540, the GUI response lags significantly. CLI will lag at times as well. We have an open case right now trying to pinpoint it. *From: *The EDUCAUSE Wireless Issues Constituent Group Listserv < WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> on behalf of Bibin George < bibin.geo...@hofstra.edu> *Reply-To: *The EDUCAUSE Wireless Issues Constituent Group Listserv < WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> *Date: *Thursday, August 3, 2017 at 4:03 AM *To: *"WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" < WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> *Subject: *[WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled Im running 8.2.160 on 8540, does anyone hit this bug yet? Terrible response from the management GUI. https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc00271/?referring_site=bugquickviewredir ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
RE: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled
I know this is not so secure, but our work around was enable http for management and login to the controller by http, that works great. From: The EDUCAUSE Wireless Issues Constituent Group Listserv [mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU] On Behalf Of Charles Francis Sent: Thursday, August 03, 2017 8:37 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled We have not hit this one specifically, but we have noticed that once we start adding AP’s and clients to an 8540, the GUI response lags significantly. CLI will lag at times as well. We have an open case right now trying to pinpoint it. From: The EDUCAUSE Wireless Issues Constituent Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> on behalf of Bibin George mailto:bibin.geo...@hofstra.edu>> Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Date: Thursday, August 3, 2017 at 4:03 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU<mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>" mailto:WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU>> Subject: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled Im running 8.2.160 on 8540, does anyone hit this bug yet? Terrible response from the management GUI. https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc00271/?referring_site=bugquickviewredir ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
Re: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled
We have not hit this one specifically, but we have noticed that once we start adding AP’s and clients to an 8540, the GUI response lags significantly. CLI will lag at times as well. We have an open case right now trying to pinpoint it. From: The EDUCAUSE Wireless Issues Constituent Group Listserv on behalf of Bibin George Reply-To: The EDUCAUSE Wireless Issues Constituent Group Listserv Date: Thursday, August 3, 2017 at 4:03 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" Subject: [WIRELESS-LAN] Web GUI unresponsive after HTTPS-redirect enabled Im running 8.2.160 on 8540, does anyone hit this bug yet? Terrible response from the management GUI. https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc00271/?referring_site=bugquickviewredir ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss. smime.p7s Description: S/MIME cryptographic signature
Web GUI unresponsive after HTTPS-redirect enabled
Im running 8.2.160 on 8540, does anyone hit this bug yet? Terrible response from the management GUI. https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc00271/?referring_site=bugquickviewredir ** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.
