3com 5500-ei PWR web interface issue

[MicrosoftTechy]

I have a 5500-ei switch by 3com (h3c) it has been set to factory state and I have started settin it up form scratch.

I have set the default ip and can get to it via a browser which is all good but when I come to login as admin I constantly get "login failed". Am I missing Somthing here?

[CyberNerd]

probably best not to set up 5500's via a browser - it's not particularly reliable.

I'd go back to the serial port.

[MicrosoftTechy]

the CLI is extremely hard to navigate but that dose not resolve the issue of the login failed ?

[CyberNerd]

the CLI is extremely hard to navigate but that dose not resolve the issue of the login failed ?

 

It's pretty straightforward on the 5500's compared to the old menu driven comware, and it is easier to perform bulk actions. I can post some setup scripts to help.

If you can get in on the serial port it will help diagnose the issue with the web interface.

login and post 'display current-configuration'

[oxide54]

i've looked at this with him and can't figure out why the web interface won't let him login,

i have a 5500G-EI and all i remember is having to set the IP and bam i was in via the web interface.

 

fwiw the web interface is okay on those switches, i use it to configure mine, i agree the cli is ridiculous on that switch.

 

i'm thinking you may have to enable the web interface somewhere. i'm sure all i did on mine was add vlan-interface ip address (ish..)

[CyberNerd]

i'm thinking you may have to enable the web interface somewhere. i'm sure all i did on mine was add vlan-interface ip address (ish..)

 

The only things i can think of is "undo ip http shutdown" - but that is if the web server isn't running.

or that there is an acl on the http server, or that the user doesn't exist or doesn't have authority to log in from a vlan or doesn't have necessary privileges for the server.

Either way you'll need to get on the cli.

 

the web interface is 'ok' when it works. If your doing any major config it is a) quicker b) more reliable on the cli.

Once you've configured one by the CLI it is really very simple to export that config onto multiple switches with similar operating systems.

 

"display local-user" should give you more idea whats going on

[MicrosoftTechy]

dispaly local-user

 

[oxide54]

does it need the servicetype mask changed?

 

or does none mean all enabled?

[CyberNerd]

mine says:

 

 

[5500G-EI]display local-user

0 The contents of local user admin:

State: Active ServiceType Mask: TSC

Idle-cut: Disable

Access-limit: Disable Current AccessNum: 1

Bind location: Disable

Vlan ID: Disable

Authorization VLAN: Disable

MAC address: Disable

Password-Aging: Disable

Password-Length: Disable

Password-Composition: Enable 1 type(s), 1 character(s) per type

User Privilege: 3

 

but it looks like yur admin user has no privileges.

 

so into system-config mode

 

sys

 

then do

 

 local-user admin

level 3

quit 

save

 

then see if that gives the user the correct rights

[MicrosoftTechy]

okay did that still nothing... hmmm

[CyberNerd]

does it need the servicetype mask changed?

 

I don't think that affects http access.

 

 

ftp FTP service type

lan-access LAN-ACCESS service type

ssh SECURE SHELL service type

telnet TELNET service type

terminal TERMINAL service type

 

ServiceType Mask Meaning: C--Terminal F--FTP L--LanAccess S--SSH T--Telnet

[CyberNerd]

what about

display ip http 

it will show if there are any acls on the web interface - mine says:

 

Basic ACL: 0

Current connection: 0

Operation status: Running

[CyberNerd]

does it need the servicetype mask changed?

 

on second thoughts, it might want TSC permission if it make the presumption that you need telnet or ssh permission in order to access the web client ?

 

try giving it TSC.....

[MicrosoftTechy]

display ip http dose not seem to work?

[CyberNerd]

display ip http dose not seem to work?

 

you might need to go back into system-config mode

[MicrosoftTechy]

nope.....

[oxide54]

you might need to go back into system-config mode

 

 

system-view (not being pedantic, just help jack_

[CyberNerd]

running out of ideas. could you copy a working config onto the switch?

[oxide54]

mine says:

 

 

[5500G-EI]display local-user

0 The contents of local user admin:

State: Active ServiceType Mask: TSC

Idle-cut: Disable

Access-limit: Disable Current AccessNum: 1

Bind location: Disable

Vlan ID: Disable

Authorization VLAN: Disable

MAC address: Disable

Password-Aging: Disable

Password-Length: Disable

Password-Composition: Enable 1 type(s), 1 character(s) per type

User Privilege: 3

 

but it looks like yur admin user has no privileges.

 

so into system-config mode

 

sys

 

then do

 

 local-user admin

level 3

quit 

save

 

then see if that gives the user the correct rights

 

TSC and level 3 did the trick

[CyberNerd]

cool

[MicrosoftTechy]

is there a easy way to reset the password @CyberNerd?

[CyberNerd]

in system view

local-user admin

password simple XXXX

service-type ssh telnet terminal

level 3

[morganw]

I've seen 3COM stuff fail to login on the web interface because the time is not set incorrectly on the switch, or on the device you are running the browser on.

[MicrosoftTechy]

@CyberNerd Thanks for that! ive documented the password now!!