MicrosoftTechy Posted May 9, 2012 Posted May 9, 2012 I have a 5500-ei switch by 3com (h3c) it has been set to factory state and I have started settin it up form scratch. I have set the default ip and can get to it via a browser which is all good but when I come to login as admin I constantly get "login failed". Am I missing Somthing here?
CyberNerd Posted May 9, 2012 Posted May 9, 2012 probably best not to set up 5500's via a browser - it's not particularly reliable. I'd go back to the serial port.
MicrosoftTechy Posted May 9, 2012 Author Posted May 9, 2012 the CLI is extremely hard to navigate but that dose not resolve the issue of the login failed ?
CyberNerd Posted May 9, 2012 Posted May 9, 2012 the CLI is extremely hard to navigate but that dose not resolve the issue of the login failed ? It's pretty straightforward on the 5500's compared to the old menu driven comware, and it is easier to perform bulk actions. I can post some setup scripts to help. If you can get in on the serial port it will help diagnose the issue with the web interface. login and post 'display current-configuration'
oxide54 Posted May 9, 2012 Posted May 9, 2012 i've looked at this with him and can't figure out why the web interface won't let him login, i have a 5500G-EI and all i remember is having to set the IP and bam i was in via the web interface. fwiw the web interface is okay on those switches, i use it to configure mine, i agree the cli is ridiculous on that switch. i'm thinking you may have to enable the web interface somewhere. i'm sure all i did on mine was add vlan-interface ip address (ish..)
CyberNerd Posted May 9, 2012 Posted May 9, 2012 i'm thinking you may have to enable the web interface somewhere. i'm sure all i did on mine was add vlan-interface ip address (ish..) The only things i can think of is "undo ip http shutdown" - but that is if the web server isn't running. or that there is an acl on the http server, or that the user doesn't exist or doesn't have authority to log in from a vlan or doesn't have necessary privileges for the server. Either way you'll need to get on the cli. the web interface is 'ok' when it works. If your doing any major config it is a) quicker b) more reliable on the cli. Once you've configured one by the CLI it is really very simple to export that config onto multiple switches with similar operating systems. "display local-user" should give you more idea whats going on
oxide54 Posted May 9, 2012 Posted May 9, 2012 does it need the servicetype mask changed? or does none mean all enabled?
CyberNerd Posted May 9, 2012 Posted May 9, 2012 mine says: [5500G-EI]display local-user 0 The contents of local user admin: State: Active ServiceType Mask: TSC Idle-cut: Disable Access-limit: Disable Current AccessNum: 1 Bind location: Disable Vlan ID: Disable Authorization VLAN: Disable MAC address: Disable Password-Aging: Disable Password-Length: Disable Password-Composition: Enable 1 type(s), 1 character(s) per type User Privilege: 3 but it looks like yur admin user has no privileges. so into system-config mode sys then do local-user admin level 3 quit save then see if that gives the user the correct rights 1
CyberNerd Posted May 9, 2012 Posted May 9, 2012 does it need the servicetype mask changed? I don't think that affects http access. ftp FTP service type lan-access LAN-ACCESS service type ssh SECURE SHELL service type telnet TELNET service type terminal TERMINAL service type ServiceType Mask Meaning: C--Terminal F--FTP L--LanAccess S--SSH T--Telnet
CyberNerd Posted May 9, 2012 Posted May 9, 2012 what about display ip http it will show if there are any acls on the web interface - mine says: Basic ACL: 0 Current connection: 0 Operation status: Running
CyberNerd Posted May 9, 2012 Posted May 9, 2012 does it need the servicetype mask changed? on second thoughts, it might want TSC permission if it make the presumption that you need telnet or ssh permission in order to access the web client ? try giving it TSC.....
CyberNerd Posted May 9, 2012 Posted May 9, 2012 display ip http dose not seem to work? you might need to go back into system-config mode
oxide54 Posted May 9, 2012 Posted May 9, 2012 you might need to go back into system-config mode system-view (not being pedantic, just help jack_
CyberNerd Posted May 9, 2012 Posted May 9, 2012 running out of ideas. could you copy a working config onto the switch?
oxide54 Posted May 9, 2012 Posted May 9, 2012 mine says: [5500G-EI]display local-user 0 The contents of local user admin: State: Active ServiceType Mask: TSC Idle-cut: Disable Access-limit: Disable Current AccessNum: 1 Bind location: Disable Vlan ID: Disable Authorization VLAN: Disable MAC address: Disable Password-Aging: Disable Password-Length: Disable Password-Composition: Enable 1 type(s), 1 character(s) per type User Privilege: 3 but it looks like yur admin user has no privileges. so into system-config mode sys then do local-user admin level 3 quit save then see if that gives the user the correct rights TSC and level 3 did the trick
MicrosoftTechy Posted August 1, 2012 Author Posted August 1, 2012 is there a easy way to reset the password @CyberNerd?
CyberNerd Posted August 2, 2012 Posted August 2, 2012 in system view local-user admin password simple XXXX service-type ssh telnet terminal level 3
morganw Posted August 2, 2012 Posted August 2, 2012 I've seen 3COM stuff fail to login on the web interface because the time is not set incorrectly on the switch, or on the device you are running the browser on.
MicrosoftTechy Posted August 6, 2012 Author Posted August 6, 2012 @CyberNerd Thanks for that! ive documented the password now!!
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now