Logging In to the Web Platform

Applicable Mode

This login mode is applicable to Fat APs and cloud APs.

Before logging in to an AP through the web platform, connect a terminal to the AP using an Ethernet cable or in wireless mode to ensure that they are reachable to each other. Then you can log in to the AP using a browser. Table 1 lists the default parameter settings of an AP.

**Table 1** Default parameter settings of an AP
Parameter	Fat AP	Cloud AP
SSID	HUAWEI-LeaderAP-XXXX (XXXX specifies the last 4 digits of the AP's MAC address.)	hw_manage_xxxx (xxxx specifies the last 4 digits of the AP's MAC address.)
IP address	Ethernet cable connection: 169.254.1.1 Wireless connection: 192.168.1.1 (V200R021C00 and earlier versions); 169.254.2.1 (V200R021C01 and later versions)	Ethernet cable connection: 169.254.1.1 Wireless connection: 169.254.2.1
Subnet mask	255.255.255.0	255.255.255.0
Username and password	For V200R020C10 and earlier versions: The default username and password are available in WLAN Default Usernames and Passwords (Enterprise Network or Carrier). If you have not obtained the access permission of the document, see Help on the website to find out how to obtain it. For V200R021C00 and later versions: The device has no default username or password. You need to set the username and password when logging in to the device for the first time.

In V200R009 or an earlier version, the default subnet mask of an AP in Ethernet cable connection mode is 255.255.0.0.

Connecting to an AP

Through an Ethernet cable
You can connect a PC to any network port on an AP or a network port on a switch reachable to the AP (IP addresses of the PC and AP on the same network segment).

Figure 1 Connecting to an AP through an Ethernet cable
1. Use an Ethernet cable to connect the PC to the AP.
2. Configure the PC.
  Configure the IP address of the PC to be on the same network segment as the default IP address of the AP, for example, 169.254.1.x/24 (excluding 169.254.1.1; 169.254.1.100 recommended).
In wireless mode
Figure 2 Connecting to an AP in wireless mode
1. Configure the terminal to automatically obtain an IP address.
2. Within the coverage of the AP, search for the WLAN on the terminal. You can access the WLAN directly or by entering the correct wireless password.

Logging In to the Web Platform

Open the browser on the PC, enter http://IP address or https://IP address in the address box, and press Enter. The login page is displayed.
Enter the login information.

For a cloud AP or cloud central AP, the locally changed password is valid only before the device registers with the iMaster NCE-Campus. After the device registers, the iMaster NCE-Campus uniformly delivers an administrator password. The delivered password will overwrite the locally configured one and is permanently valid.
1. Select a language.
  
  The system supports English and Chinese. By default, the system uses the same language as the browser.
2. Enter a user name and password.
  
  Upon the first login to the web platform, you are prompted to set the user name and password for subsequent login through the web platform or STelnet, which will be delivered to managed Fit APs for logging in to them. Additionally, the specified password is used as the password for console port login. This password will be also used as the key for the offline management VAP, allowing for wireless connections to the management SSID.
3. Click Login.
If the login fails, the following possible causes are displayed at the same time:
- The user name or password is incorrect: indicates that the entered user name or password is incorrect. Click OK to check the user name and password. If they are incorrect, enter them again.
- The user does not have the right to log in or the login right expires: indicates that the current online user has no permission to log in to the web platform. Contact network administrators.
- The number of login users has reached the maximum value: indicates that the number of online web users reaches the upper limit. By default, the maximum number of online web users is 2.
- The number of times the password is incorrectly entered has reached the limit, and the user is locked: indicates that the current login account is locked and will be automatically unlocked after 5 minutes.
Click Logout in the upper right corner to Log out of the web platform. The login page is displayed.
If you do not perform any operation within a specified duration (10 minutes by default), you are logged out. To return to the login page, click OK.

(Optional) Loading a Web Page File

Generally, a web page file is integrated in the system software of the device and has been installed. You do not need to install the web page file separately. However, to upgrade the web page file, you can log in to the official website to download an independent web page file, upload it to the device, and install it.

Upload the web page file to the device.

Load the web page file.

<HUAWEI> system-view
[HUAWEI] http server load web.7z

Enable the HTTPS service.

[HUAWEI] http secure-server enable    //By default, the HTTPS IPv4 service is enabled, and the HTTPS IPv6 service is disabled.

(Optional) Loading a Digital Certificate File and Binding an SSL Policy

By default, a digital certificate file has been loaded on the device. If the browser displays a message indicating a security risk or the web page fails to be accessed due to a certificate issue, you need to update the digital certificate file.

Upload the digital certificates and private key file to the device.

Ensure that you have obtained the local certificate abc_local.pem, CA certificate abc_ca.pem, and RSA key pair privatekey.pem and uploaded them to the storage medium of the device. If multiple CA certificates are available, perform the same operation to load the certificates to the memory of the device. The key for generating privatekey.pem is Example@123.

Load the certificates and RSA key pair.

[HUAWEI] pki realm abc
[HUAWEI-pki-realm-abc] quit
[HUAWEI] pki import-certificate local realm abc pem filename abc_local.pem
[HUAWEI] pki import-certificate ca realm abc pem filename abc_ca.pem
[HUAWEI] pki import rsa-key-pair key1 pem privatekey.pem password Example@123

Create an SSL policy and load a digital certificate.

[HUAWEI] ssl policy sslserver type server
[HUAWEI-ssl-policy-sslserver] pki-realm abc
[HUAWEI-ssl-policy-sslserver] version tls1.2
[HUAWEI-ssl-policy-sslserver] quit

Bind the SSL policy and enable the HTTPS service.

[HUAWEI] http secure-server ssl-policy sslserver
[HUAWEI] http secure-server enable

Display detailed information about the loaded digital certificates.

[HUAWEI] display ssl policy sslserver
------------------------------------------------------------------------------ 
  Policy name                            :   sslserver                             
  Policy ID                              :   2                                 
  Policy type                            :   Server                             
  Cipher suite                           :   ecdhe_rsa_aes128_gcm_sha256        
                                             ecdhe_rsa_aes256_gcm_sha384   
  PKI realm                              :   abc  
  Version                                :   tls1.2   
  Cache number                           :   128                                  
  Time out(second)                       :   3600                                
  Server certificate load status         :   loaded                              
  CA certificate chain load status       :   loaded                              
  SSL renegotiation status               :   enable   
  Bind number                            :   1                                   
  SSL connection number                  :   0                                  
------------------------------------------------------------------------------