Using “no Web-management” & “Web-management disable”does not disable both http and https connection

Chandini — Tue, 27 Feb 2024 16:56:36 GMT

Issue noticed:

In firmware 8095k and 8095g below details were noticed
- If you use “web-management http” and “web-management https” command to enable http and https
- Then you execute “no web-management” the state of http and https remains enabled, and the command does not disable the http and https.
- Here to disable we must use “no web-management http” and “no web-management https” command to disable http and https.
- If we use “web-management” this enables both http and https
- But if we use “no web-management http” and “no web-management https” command to disable http and https it does not disable
- Instead, when we use “no web-management” both http and https is disabled.
In firmware 9010f and 1010a below details were noticed
- In this version instead of “no web-management” and “web-management”, “web-management disable” command is introduced.
- Here we use “web-management http” and “web-management https” command to enable http and https.
- And after that if we use “web-management disable” it will not disable both http and https
- We again must use “no web-management http” and “no web-management https” command to disable http and https.

Lab test and outputs to validate if the issue is same as the scenario mentioned in this article:

Tested in firmware 8095k and 8095g:

Using “Web-management” to enable both http and https and to disable we use “no web-management”

ICX7650-48ZP Switch(config)#show web

HTTP server status: Disabled

HTTPS server status: Disabled

No web connection.

ICX7650-48ZP Switch(config)#web-management

ICX7650-48ZP Switch(config)#show web

HTTP server status: Enabled

HTTPS server status: Enabled

No web connection.

ICX7650-48ZP Switch(config)#no web-management

ICX7650-48ZP Switch(config)#show web

HTTP server status: Disabled

HTTPS server status: Disabled

No web connection.

ICX7650-48ZP Switch(config)#

Now when we use “web-management http” and “web-management https” to enable and using “no web-management” to disable.

ICX7650-48ZP Switch(config)#web-management http

ICX7650-48ZP Switch(config)#web-management https

ICX7650-48ZP Switch(config)#show web

HTTP server status: Enabled

HTTPS server status: Enabled

No web connection.

ICX7650-48ZP Switch(config)#no web-management

ICX7650-48ZP Switch(config)#show web

HTTP server status: Enabled

HTTPS server status: Enabled

No web connection.

ICX7650-48ZP Switch(config)#no web-management http

ICX7650-48ZP Switch(config)#no web-management https

Note: ip ssl client continues to be in enabled mode if enabled

ICX7650-48ZP Switch(config)#show web

HTTP server status: Disabled

HTTPS server status: Disabled

No web connection.

Tested in firmware 9010f and 1010a:

Using “web-management http” and “web-management https” to enable and “web-management disable” to disable http and https

ICX7650-48ZP Switch(config)#show web

HTTP server status: Disabled

HTTPS server status: Disabled

No web connection.

ICX7650-48ZP Switch(config)#web-management http

ICX7650-48ZP Switch(config)#web-management https

ICX7650-48ZP Switch(config)#show web

HTTP server status: Enabled

HTTPS server status: Enabled

No web connection.

ICX7650-48ZP Switch(config)#web-management disable

Error - WebUI already disabled

ICX7650-48ZP Switch(config)#show web

HTTP server status: Enabled

HTTPS server status: Enabled

No web connection.

ICX7650-48ZP Switch(config)#no web-management http

ICX7650-48ZP Switch(config)#no web-management https

ICX7650-48ZP Switch(config)#show web

HTTP server status: Disabled

HTTPS server status: Disabled

No web connection.

We can see notice that in both tests even when “no web-management” in 8095 version and “ web-management disable” command is used in 9010 version the HTTP and HTTPS connection stays enabled.

Solution:

The above issue is fixed on below versions and logged with defect ID FI-279953

For 8095 versions its fixed in 8095n
For 9010 versions fix in process in 9010k
For 10.0.10 versions fix in process in 10.0.10d

topic Using “no Web-management” & “Web-management disable”does not disable both http and https connection in RUCKUS Self-Help

Using “no Web-management” & “Web-management disable”does not disable both http and https connection