ZoneDirector MGMT web page not responding

  • 3
  • Question
  • Updated 3 months ago
  • Answered
I have a strange one here. I am able to login into my zone director via SSH but unable to log in via https... Not sure when the https stopped working, but it did at least a month ago. Anyone have any suggestions?
Photo of Patrick O'Connor

Patrick O'Connor

  • 5 Posts
  • 0 Reply Likes

Posted 3 years ago

  • 3
Photo of Munish Dhiman

Munish Dhiman, Employee

  • 100 Posts
  • 14 Reply Likes
Hi Patrick ,

Are you not able to get the page or it stops responding after some time ? could you post the print screen ?

Check if the TCP destination ports 80 and 443 (HTTP and
HTTPS) are open .

Thanks
Munish

**** Pls mark all useful/good answers ****
Photo of Patrick O'Connor

Patrick O'Connor

  • 5 Posts
  • 0 Reply Likes
Yes according to nmap ports 80 and 443 are open. Pings are successful and like I said SSH works. Via SSH i can login, look at configs and such. When you try to open a web browser to the IP the browser times out. Nothing i can take a screen print of other than explorer, firefox, and chrome saying they timed out waiting for a response.
Photo of Max O'Driscoll

Max O'Driscoll, AlphaDog

  • 332 Posts
  • 81 Reply Likes
I know you've said "a month ago" but just checking... everything else working, ie wireless clients no interruption, authenticating okay?

Can you physically see your ZD, all leds greeny yellow indicating normal operation?
Photo of Patrick O'Connor

Patrick O'Connor

  • 5 Posts
  • 0 Reply Likes
Yep, currently about 500Mb to 600Mb of customer traffic still working. Physical inspection is good, all lights are green that should be, yellow or red that I could see.
Photo of Max O'Driscoll

Max O'Driscoll, AlphaDog

  • 332 Posts
  • 81 Reply Likes
Also to remove the obvious... you say have tried different browsers, have you also tried from a different pc/laptop?

Also do you go through a 3rd party filtered proxy (might be nothing but just checking).
Photo of Monnat Systems

Monnat Systems, AlphaDog

  • 759 Posts
  • 162 Reply Likes
Hi Patrick,

As per Release notes of 9.8.2, there are quite a few fixes for the web interface no response or getting hanged.

Please do take a look there and see if upgrading it is worth while step.

Hope this helps.
Photo of Michael Brado

Michael Brado, Official Rep

  • 2089 Posts
  • 289 Reply Likes
Yes, to re-inforce Monnat's suggestion, ZoneFlex version 9.8 includes a new internal 'webs' server, and overcomes known issues in versions 9.7 and earlier.
Photo of Patrick O'Connor

Patrick O'Connor

  • 5 Posts
  • 0 Reply Likes
Thanks Mannat, currently all of our Zone directors (30+) are currently running 9.7. So I will bring up the software revision to our Lab team and see if we can get that code into production.

Max, Currently the Zone director is on our backbone and does not filtered offnet, but thanks for the suggestion.
Photo of Monnat Systems

Monnat Systems, AlphaDog

  • 759 Posts
  • 162 Reply Likes
Hi Patrick,
Are you running into same issue on all your ZD's?
Photo of Munish Dhiman

Munish Dhiman, Employee

  • 100 Posts
  • 14 Reply Likes
Hi Patrick,

Is it possible for you to hardwire a client into ZD and see if it is able to deliver the page?

If you don't get the page , run wire shark on the laptop to see the http traffic .

Thanks
Munish
Photo of Patrick O'Connor

Patrick O'Connor

  • 5 Posts
  • 0 Reply Likes
I opened a ticket with ruckus support, and they have indicated that it is a SSL certificate problem. Apparently i have to re install the default cert and reboot the ZD. Thanks to everyone who offered suggestions on this matter.
Photo of Nam Nguyen Phuoc

Nam Nguyen Phuoc

  • 0 Posts
  • 0 Reply Likes
Hi Patrick,

My ZD1200 had the same the problem with Certificate, i can not open the web page (https). 
Please help me details how to re-install the defaut cert... sorry i don't know much about ZD and CLI.
Thanks in advanced. Nam Nguyen.
Photo of Michael Brado

Michael Brado, Official Rep

  • 2074 Posts
  • 289 Reply Likes
Hi Nam, we have documented the ZD default certificate recovery process in KBA-1145.
I hope this is helpful.

https://support.ruckuswireless.com/answers/000001145

Troubleshooting Steps

1. ping ZD's IP address, and get reply.
2. try to web log in ZD. but we cannot web log in ZD.
3. try to ssh log in ZD, and get login prompt ok.



Workaround


If the ZoneDirector will ping/ssh but not open WebGUI, follow the below procedure to reset/restore the ZD certificate:


SSH into your ZD, login with your admin credentials and you can reset
your certificate through the command interface and this will restart
your Zone Director when reset.

Ruckus> en
Ruckus# config
Ruckus (config)# certificate
Ruckus (config-certificate)# restore

• Zone Director will restart now to apply the changes in the certificate settings.
Photo of DSE

DSE

  • 62 Posts
  • 3 Reply Likes
Hello everybody, i have a ZD3000 with the 9.8.2.0 build 15 already and sometimes i have huge problems opening the dashboard, to slow and giving sometimes timeout, Since i have already 9.8 someone know what might be the problem? regards
Photo of Michael Brado

Michael Brado, Official Rep

  • 2088 Posts
  • 289 Reply Likes
Have you always seen slow WebUI response?  Could it be your ZD is on a big flat network?  Segmenting your controller and APs to a separate management VLAN
is one way to isolate them from other traffic/b'casts.  Is it slow if your PC is on the same network, versus coming from a remote network (ie network bottleneck between)?
Photo of DSE

DSE

  • 62 Posts
  • 3 Reply Likes
Not always, but sometimes is very slow. I have centralized this ZD, and i use for temporary remote hotspots that are placed in different zones and with different vlans, so it's alrady isolated from other traffic, there any place where i can debug ou see any log to troubleshooting this? i don't see in the webui? maybe by CLI?

 
Photo of Garrett Collier

Garrett Collier

  • 11 Posts
  • 1 Reply Like
I am having a similar problem on my ZD3050 w/ firmware  9.13.0.0 build 232. I was having the same problem on 9.12 and 9.8 as well. Has anyone figured out what causes this? My web interface will be working fine, then just arbitrarily, it will die for both dns name and ip address. I was able to work around it by assigning a maintenance interface with a separate IP, however, it would be great if it would 'just work correctly'
Photo of Kendal Montgomery

Kendal Montgomery

  • 1 Post
  • 0 Reply Likes
We're also having this symptom on 9.13.0.0 build 232 on a ZD1200.  A reboot does not restore HTTPS interface access.
Photo of Michael Brado

Michael Brado, Official Rep

  • 2109 Posts
  • 297 Reply Likes
Very strange.  Have you tried multiple Browser types?

I don't know of any bug for lost HTTPS access, but relying on my past TSE experience, can I ask if you're
able to schedule a change management period and upgrade from the GA release to 9.13.3.0.41 (MR3)?