Accessing the AOS-CX Web UI

By default, the 6200, 6300, and 6400 switches have the HTTPS server enabled on the mgmt and default VRF. The 4100i, 6000, and 6100 switches have the HTTPS server enabled on the default VRF. On all switches, the REST Representational State Transfer. REST is a simple and stateless architecture that the web services use for providing interoperability between computer systems on the Internet. In a RESTful web service, requests made to the URI of a resource will elicit a response that may be in XML, HTML, JSON or some other defined format. API Application Programming Interface. Refers to a set of functions, procedures, protocols, and tools that enable users to build application software. access mode is set to read-write. You must configure a static IP or use the IP address on the management port (6200, 6300, 6400 switches only; the 4100i, 6000, and 6100 switches do not have a management port) to access the Web UI.

When Aruba Central manages AOS-CX switches, it functions as the single source of truth and the Web UI operates in read-only mode.

Prerequisites

The 6200 switches support two VRFs. One mgmt VRF and one default VRF.

The 4100i switch only include the default VRF; there is no mgmt VRF.

  • Certificate-based authentication is not supported on 6000 and 6100 Switch Series.
  • The 6000 and 6100 switches only include the default VRF; there is no mgmt VRF.

To use the Web UI to make configuration changes—such as adding users—the following must be true:

  • The system that you are using to access the Web UI must be on the same network and the subnet as the switch.
  • Proxy must be disabled on browsers through which you are accessing the Web UI.
  • You must have a valid login user name and password or a valid certificate.
  • The user name you use to log in must have administrator rights.

For information about configuring the management interface and REST API access, see the AOS-CX Fundamentals Guide.

For information about configuring and managing the certificates, see the AOS-CXSecurity Guide.

Procedure

  1. Start a supported web browser and enter the IP address of the management port in the address bar. Use HTTPS.

    2. For example:

    https://192.0.2.5

    You must use a supported browser, such as Chrome, Firefox, Edge, or Safari. For details on supported browser versions, see the Release Notes for the version of AOS-CX you are using.

  2. Optionally a pre- and post-login message may be displayed. The message can be customized or disabled with the banner command.
  3. For the password-based authentication, at the login page, enter your user name and password credentials, then click Login. For the certificate-based authentication, at the login page, click LOGIN WITH CERTIFICATE, select your certificate and click Accept.
  4. After you log in, the main Web UI page is displayed.

    Ensure that both the switch and the client where the Web UI is running are set to use NTP or to a time zone based on UTC time. If the switch and the client time are not in sync, then a message is displayed after you log in, indicating the time difference.