We help IT Professionals succeed at work.

Web interface on Cisco 1242AG only partially working

I have a Cisco AP1242 wireless access point in which some of the features in the GUI web interface don't seem to work. The AP itself works OK and can be fully configured using IOS commands through the console or a telnet/ssh connection.

For example, if I set up a SSID on Radio0 using the CLI and then browse to the Security... SSID Manager page, this doesn't show up and the Current SSID list drop-down box is empty and doesn't even have the <NEW> option to add one. A number of other pages have missing 'Apply' buttons too.

Is there something I'm missing? I know it's possible to disable the web interface completely but maybe there are options to disable certain features in the web interface? The IOS version is 12.4(3g) by the way
Comment
Watch Question

CERTIFIED EXPERT
Top Expert 2014
Commented:
Have you tried a different browser, or relaxing the security settings?

Can you post the show flash output?
andyt222Systems administrator

Author

Commented:
I'm using Firefox 4.0 for Linux and I haven't yet tried a different browser as the web GUI on some other Cisco wireless access points (AP1220 and AP1230 models) works fine.

I'm not sure which security settings needs to be relaxed?

Here is the output from show flash:

 ap3>show flash

Directory of flash:/

    2  -rwx        1918  Nov 03 2011 09:30:06 +00:00  private-config
    4  drwx         320  Jan 01 1970 00:06:03 +00:00  c1240-k9w7-mx.124-3g.JA1
  154  -rwx        1048  Nov 03 2011 09:30:06 +00:00  private-multiple-fs
  155  -rwx        2059  Nov 03 2011 09:30:06 +00:00  config.txt
  156  -rwx         263  Mar 01 2002 01:43:22 +00:00  env_vars

15998976 bytes total (10450432 bytes free)

Thanks for getting back to me.

Andy

Commented:
Can you do a show run from the CLI and post everything below the BVI 1 interface??
andyt222Systems administrator

Author

Commented:
Here's the entire output from 'show run' as the BVI1 interface isn't mentioned in this output (I've listed the output of show interface BVI1 after this):

ap3#show run
Building configuration...

Current configuration : 2059 bytes
!
! Last configuration change at 09:29:55 UTC Thu Nov 3 2011 by cisco
! NVRAM config last updated at 09:30:06 UTC Thu Nov 3 2011 by cisco
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap3
!
enable secret 5 $1$6QvT$swCPVfd4Q/X9wSZRmbbZ21
!
aaa new-model
!
!
!
aaa session-id common
!
resource policy

and the output of 'show interface BVI1' is:

ap3#show interface BVI1
BVI1 is up, line protocol is up
  Hardware is BVI, address is 001d.a1cd.4002 (bia 001d.e58e.8b00)
  Internet address is 192.168.1.242/24
  MTU 1500 bytes, BW 54000 Kbit, DLY 5000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input never, output never, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     16210 packets input, 972600 bytes, 0 no buffer
     Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
     15488 packets output, 5254711 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 output buffer failures, 0 output buffers swapped out
CERTIFIED EXPERT
Top Expert 2014

Commented:
Some of the Config is missing, but I'd try IE first to see if it's a browser issue.  If the same happens in IE try upgradingthe IOS to 12.4-10.JA or above.

Commented:
Let me see if I have this straight, when navigating to the SSID Manager page, the drop down menu that lists the SSID's associated with the AP isn't listing anything?

This usually means there are no SSID's created on the AP. Do you have multiple AP's within the space you are installing this AP? If so, can you please tell me how you confirmed that users are associated to this AP in particular? The reason I ask is, when you did show run and supplied us the configs, there is a lot missing - did you withhold it on purpose? Also, as far as I know, the IOS isn't old enough that it wouldn't list the BVI 1 interface along with the "show run" command. I only asked for what was below BVI 1 because I was looking for the "ip http server" command. But since you can access the web page, it must be on.

Can you do a show run and list the whole thing - minus any sensitive information. You should have "service password encryption" configured, which will keep us from seeing any passwords. If you don't see this, from the # symbol, type service password encryption and it will hide all your passwords. Then post the full config.
andyt222Systems administrator

Author

Commented:
Craigbeck: I will take the AP to another site  tomorrow and try it with IE there as there are no WIndows PCs here where I want to use this AP. I'm not sure if I can upgrade IOS - I have heard you need a Cisco service or support contract to be able to download ISO images, etc.

Kuleaze: I have just now connected to the AP with my cellphone and show run is now listing a lot more information! No, I didn't withhold anything last time, it really did come up with very little. I have only set up one SSID called 'Lausanne22-garden' and that's the one my cellphone is associated with. Here is the full show run output with nothing taken out:

ap3>enable
Password:
ap3#show run
Building configuration...

Current configuration : 2059 bytes
!
! Last configuration change at 09:29:55 UTC Thu Nov 3 2011 by cisco
! NVRAM config last updated at 09:30:06 UTC Thu Nov 3 2011 by cisco
!
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname ap3
!
enable secret 5 $1$6QvT$swCPVfd4Q/X9wSZRmbbZ21
!
aaa new-model
!
!
!
aaa session-id common
!
resource policy
!
ip subnet-zero
ip domain name time-domain.co.uk
!
!
!
dot11 ssid Lausanne22-garden
   authentication open
   guest-mode
!
power inline negotiation prestandard source
!
!
username Cisco password 7 047802150C2E
!
bridge irb
!
!
interface Dot11Radio0
 no ip address
 no ip route-cache
 !
 encryption key 1 size 128bit 7 21120C3D62AE14C164E236416D8D transmit-key
 encryption mode wep mandatory
 !
 ssid Lausanne22-garden
 !
 speed  basic-1.0 basic-2.0 basic-5.5 basic-11.0 basic-6.0 basic-9.0 basic-12.0 basic-18.0 basic-24.0 basic-36.0 basic-48.0 basic-54.0
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface Dot11Radio1
 no ip address
 no ip route-cache
 shutdown
 no dfs band block
 channel dfs
 station-role root
 bridge-group 1
 bridge-group 1 subscriber-loop-control
 bridge-group 1 block-unknown-source
 no bridge-group 1 source-learning
 no bridge-group 1 unicast-flooding
 bridge-group 1 spanning-disabled
!
interface FastEthernet0
 no ip address
 no ip route-cache
 duplex auto
 speed auto
 bridge-group 1
 no bridge-group 1 source-learning
 bridge-group 1 spanning-disabled
!        
interface BVI1
 ip address 192.168.1.242 255.255.255.0
 no ip route-cache
!
ip default-gateway 192.168.1.1
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
access-list 111 permit tcp any any neq telnet
bridge 1 route ip
!
!
!
line con 0
 access-class 111 in
line vty 0 4
 access-class 111 in
!
sntp server 158.152.1.76
end

Thank you both for your help, it is much appreciated.

Andy

CERTIFIED EXPERT
Top Expert 2014
Commented:
No problem - missing info is common when using an unsupported browser.

I can clearly see from your configuration that the GUI should show one SSID and that it's only configured on the 'b/g' interface.  Saying that it must be the browser, as missing files in the html directory would cause more than just configuration items to be missing.  I would expect that buttons, titlebars, menu images, etc would be missing too.

I'm pretty sure it'll work with IE without a problem.
Commented:
After looking at the configurations, I would agree with craigbeck. This looks like it might be a browser issue. I just wasn't ready to commit to that without seeing the configs. To help prove craigbeck's theory you can take the fact that you were able to pull the complete configurations from your cell and not your computer.

I would try downloading Avant Browser and seeing if that works. You don't have to wait to get IE. At least you can check it now and see if this is you issue then let us know. I think you're on the right track now! Good luck.
andyt222Systems administrator

Author

Commented:
Yes, you're right - it is a browser issue. I managed to borrow a Windows laptop and everything works fine with IE!

This has baffled me because I've had no problems using Firefox with 1220 and 1230 APs running IOS 12.2(11)3A so I didn't think the browser was the cause of the problem. I have since found no Linux. FreeBSD or Solaris browser will work properly with the 1242 AP - it has to be IE.

Thanks both for solving my problem,

Andy
andyt222Systems administrator

Author

Commented:
Both Craigbeck and Kuleaze correctly pointed out from the start that this problem was highly likely to be a browser issue rather than a problem with the Cisco AP