Issue noticed:
- In firmware 8095k and 8095g below details were noticed
- If you use “web-management http” and “web-management https” command to enable http and https
- Then you execute “no web-management” the state of http and https remains enabled, and the command does not disable the http and https.
- Here to disable we must use “no web-management http” and “no web-management https” command to disable http and https.
- If we use “web-management” this enables both http and https
- But if we use “no web-management http” and “no web-management https” command to disable http and https it does not disable
- Instead, when we use “no web-management” both http and https is disabled.
- In firmware 9010f and 1010a below details were noticed
- In this version instead of “no web-management” and “web-management”, “web-management disable” command is introduced.
- Here we use “web-management http” and “web-management https” command to enable http and https.
- And after that if we use “web-management disable” it will not disable both http and https
- We again must use “no web-management http” and “no web-management https” command to disable http and https.
Lab test and outputs to validate if the issue is same as the scenario mentioned in this article:
Tested in firmware 8095k and 8095g:
Using “Web-management” to enable both http and https and to disable we use “no web-management”
ICX7650-48ZP Switch(config)#show web
HTTP server status: Disabled
HTTPS server status: Disabled
No web connection.
ICX7650-48ZP Switch(config)#web-management
ICX7650-48ZP Switch(config)#show web
HTTP server status: Enabled
HTTPS server status: Enabled
No web connection.
ICX7650-48ZP Switch(config)#no web-management
ICX7650-48ZP Switch(config)#show web
HTTP server status: Disabled
HTTPS server status: Disabled
No web connection.
ICX7650-48ZP Switch(config)#
Now when we use “web-management http” and “web-management https” to enable and using “no web-management” to disable.
ICX7650-48ZP Switch(config)#web-management http
ICX7650-48ZP Switch(config)#web-management https
ICX7650-48ZP Switch(config)#show web
HTTP server status: Enabled
HTTPS server status: Enabled
No web connection.
ICX7650-48ZP Switch(config)#no web-management
ICX7650-48ZP Switch(config)#show web
HTTP server status: Enabled
HTTPS server status: Enabled
No web connection.
ICX7650-48ZP Switch(config)#no web-management http
ICX7650-48ZP Switch(config)#no web-management https
Note: ip ssl client continues to be in enabled mode if enabled
ICX7650-48ZP Switch(config)#show web
HTTP server status: Disabled
HTTPS server status: Disabled
No web connection.
Tested in firmware 9010f and 1010a:
Using “web-management http” and “web-management https” to enable and “web-management disable” to disable http and https
ICX7650-48ZP Switch(config)#show web
HTTP server status: Disabled
HTTPS server status: Disabled
No web connection.
ICX7650-48ZP Switch(config)#web-management http
ICX7650-48ZP Switch(config)#web-management https
ICX7650-48ZP Switch(config)#show web
HTTP server status: Enabled
HTTPS server status: Enabled
No web connection.
ICX7650-48ZP Switch(config)#web-management disable
Error - WebUI already disabled
ICX7650-48ZP Switch(config)#show web
HTTP server status: Enabled
HTTPS server status: Enabled
No web connection.
ICX7650-48ZP Switch(config)#no web-management http
ICX7650-48ZP Switch(config)#no web-management https
ICX7650-48ZP Switch(config)#show web
HTTP server status: Disabled
HTTPS server status: Disabled
No web connection.
We can see notice that in both tests even when “no web-management” in 8095 version and “ web-management disable” command is used in 9010 version the HTTP and HTTPS connection stays enabled.
Solution:
The above issue is fixed on below versions and logged with defect ID FI-279953
- For 8095 versions its fixed in 8095n
- For 9010 versions fix in process in 9010k
- For 10.0.10 versions fix in process in 10.0.10d
