Using “no Web-management” & “Web-management disable”does not disable both http and https connection

[Chandini]

Issue noticed:

1. In firmware 8095k and 8095g below details were noticed
   •  If you use “web-management http” and “web-management https” command to enable http and https
   • Then you execute “no web-management” the state of http and https remains enabled, and the command does not disable the http and https.
   • Here to disable we must use “no web-management http” and “no web-management https” command to disable http and https.
   • If we use “web-management” this enables both http and https
   • But if we use “no web-management http” and “no web-management https” command to disable http and https it does not disable
   • Instead, when we use “no web-management” both http and https is disabled.
2. In firmware 9010f and 1010a below details were noticed
   • In this version instead of “no web-management” and “web-management”, “web-management disable” command is introduced.
   • Here we use “web-management http” and “web-management https” command to enable http and https.
   • And after that if we use “web-management disable” it will not disable both http and https
   • We again must use “no web-management http” and “no web-management https” command to disable http and https.

Lab test and outputs to validate if the issue is same as the scenario mentioned in this article:

Tested in firmware 8095k and 8095g:

Using “Web-management” to enable both http and https and to disable we use “no web-management”

ICX7650-48ZP Switch(config)#show web

HTTP server status: Disabled

HTTPS server status: Disabled

No web connection.

ICX7650-48ZP Switch(config)#web-management

ICX7650-48ZP Switch(config)#show web

HTTP server status: Enabled

HTTPS server status: Enabled

No web connection.

ICX7650-48ZP Switch(config)#no web-management

ICX7650-48ZP Switch(config)#show web

HTTP server status: Disabled

HTTPS server status: Disabled

No web connection.

ICX7650-48ZP Switch(config)#

Now when we use “web-management http” and “web-management https” to enable and using “no web-management” to disable.

ICX7650-48ZP Switch(config)#web-management http

ICX7650-48ZP Switch(config)#web-management https

ICX7650-48ZP Switch(config)#show web

HTTP server status: Enabled

HTTPS server status: Enabled

No web connection.

ICX7650-48ZP Switch(config)#no web-management

ICX7650-48ZP Switch(config)#show web

HTTP server status: Enabled

HTTPS server status: Enabled

No web connection.

ICX7650-48ZP Switch(config)#no web-management http

ICX7650-48ZP Switch(config)#no web-management https

Note: ip ssl client continues to be in enabled mode if enabled

ICX7650-48ZP Switch(config)#show web

HTTP server status: Disabled

HTTPS server status: Disabled

No web connection.

Tested in firmware 9010f and 1010a:

Using “web-management http” and “web-management https” to enable and “web-management disable” to disable http and https

ICX7650-48ZP Switch(config)#show web

HTTP server status: Disabled

HTTPS server status: Disabled

No web connection.

ICX7650-48ZP Switch(config)#web-management http

ICX7650-48ZP Switch(config)#web-management https

ICX7650-48ZP Switch(config)#show web

HTTP server status: Enabled

HTTPS server status: Enabled

No web connection.

ICX7650-48ZP Switch(config)#web-management disable

Error - WebUI already disabled

ICX7650-48ZP Switch(config)#show web

HTTP server status: Enabled

HTTPS server status: Enabled

No web connection.

ICX7650-48ZP Switch(config)#no web-management http

ICX7650-48ZP Switch(config)#no web-management https

ICX7650-48ZP Switch(config)#show web

HTTP server status: Disabled

HTTPS server status: Disabled

No web connection.

We can see notice that in both tests even when “no web-management” in 8095 version and “ web-management disable”  command is used in 9010 version the HTTP and HTTPS connection stays enabled.

Solution:

The above issue is fixed on below versions and logged with defect ID FI-279953

• For 8095 versions its fixed in 8095n
• For 9010 versions fix in process in 9010k
• For 10.0.10 versions fix in process in 10.0.10d