disable https on ap's managed by ZD

  • 1
  • Question
  • Updated 1 month ago
  • Answered
  • (Edited)
Hi,

I'm running multiple ZD's on 10.x tree and found out that all AP's have https access enabled. Going via AP and AP group settings in ZD, I cannot find any way to disable https access for all AP's besides ssh'ing to each one separately and executing 'set https disable'.. but this doesn't scale very well.

I read in forums that before  on 9.x this was disabled by default, wondering why its turned back on now and how to disable it.

Thanks
Photo of Mikelis Druvietis

Mikelis Druvietis

  • 5 Posts
  • 0 Reply Likes

Posted 9 months ago

  • 1
Photo of Monnat Systems

Monnat Systems, AlphaDog

  • 923 Posts
  • 200 Reply Likes
there is a remote AP cli command in ZD through which u can enable/disable or run commands which will get applied to all AP's in one shot. see example below:


ruckus> enable 
ruckus#debugruckus(debug)# remote_ap_cli -A "set http enable"
ruckus(debug)# remote_ap_cli -A "set https enable"
Photo of Mikelis Druvietis

Mikelis Druvietis

  • 5 Posts
  • 0 Reply Likes
Hi,

Thanks for help, but this won't work:
ruckus(debug)# remote_ap_cli -A "set https disable"
---- Command 'rkscli -c "set https disable "' execution timeout at f8:e7:1e:2b:f9:b0
---- Command 'rkscli -c "set https disable "' execution timeout at f8:e7:1e:28:05:c0
---- Command 'rkscli -c "set https disable "' execution timeout at f8:e7:1e:2b:f8:60
---- Command 'rkscli -c "set https disable "' execution timeout at f8:e7:1e:2c:98:d0
---- Command 'rkscli -c "set https disable "' execution timeout at f8:e7:1e:2c:95:60
---- Command Execution Summary:
         success: 0
         failure: 5
           total: 5
remote_ap_cli "-A" ""set" "https" "disable""
ruckus(debug)#


is it trying to do it over some L2 broadcast? All AP's are connected via L3 ipv4.
Photo of Shaun van Tonder

Shaun van Tonder

  • 2 Posts
  • 0 Reply Likes

Hi there. If I may ask what do you mean https enabled. Is this when logging into the device or used when accessing the logon page portal for the guest landing page or custom landing page with AD authentication ?


Thanks.

Photo of Mikelis Druvietis

Mikelis Druvietis

  • 5 Posts
  • 0 Reply Likes
I mean when I access its management ip over 443 port, it promts for user login and would like to disable this www access entirely. 'set https disable' achieves it, but only way to get it working I found is by ssh'ing to ap separately, but I have few hundred ap's under 10+ zd's, so I'm searching way to apply this on group of AP's from ZD.
Photo of Mikelis Druvietis

Mikelis Druvietis

  • 5 Posts
  • 0 Reply Likes
Is ruckus really missing such function ?
Photo of dragos dimitriu

dragos dimitriu

  • 6 Posts
  • 2 Reply Likes
ruckus(debug)# remote_ap_cli -A "set https disable" works for ZD 1200, firmware : 10.2.0.0 build 189