API Connect

API Connect

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#API Connect
#Applicationintegration
#APIConnect
 View Only
Expand all | Collapse all

web-mgmt - unknown command or macro

  • 1.  web-mgmt - unknown command or macro

    Posted Mon April 07, 2025 09:35 AM
    Edited by John Hawkins Mon April 07, 2025 10:03 AM

    Hi Folks,

    pretty new to DP so bear with me !

    Our web management console has gone and disappeared.

    We have been able to log into it in the past but now we can't.

    I do the following..

    login to the DP

    switch to the default domain and enter "web-mgmt" - but it's unknown..

    idg# web-mgmt
    Unknown command or macro (web-mgmt)

    I've now got a little further and tried to configure it ->

    idg(config)# web-mgmt 0.0.0.0 9090 600

    %       Required referenced object not up

    Web management: successfully started

    but still nothing to see when I hit the url I expect it on.

    Any clues where it's gone and what I should do now???


    Many thanks for any help!
    John.



    ------------------------------
    John Hawkins
    Integration Consultant
    ------------------------------



  • 2.  RE: web-mgmt - unknown command or macro

    Posted Tue April 08, 2025 02:06 AM

    Hello John,

    It looks like an object your web management relies on is not up. Is your web management using a custom TLS certificate or RBM?

    You can try the "show log" command to see the default log, which could contain more information.

    Kind regards,

    Hindrik



    ------------------------------
    Hindrik Brouwer
    ------------------------------



  • 3.  RE: web-mgmt - unknown command or macro

    Posted Tue April 08, 2025 03:09 AM

    Hi John,

    further to Hindrik's sensible comments, you can remove a not-working tls configuration and allow the DP to use the built-in certificate as described in the manual:
    https://www.ibm.com/docs/en/datapower-gateway/10.6.x?topic=wa-removing-tls-profile-assignment-from-web-management-service

    There is a slightly more friendly option available rather that trying to configure everything on a single command line. Enter web-mgmt service mode from configure terminal mode using the web-mgmt command without any further parameters. 

    The available commands are then documented:
    https://www.ibm.com/docs/en/datapower-gateway/10.6.0?topic=commands-web-management-service

    Regards,



    ------------------------------
    Neil Casey
    Senior Consultant
    Syntegrity Solutions
    Melbourne, Victoria
    IBM Champion (Cloud) 2019-22
    ------------------------------



  • 4.  RE: web-mgmt - unknown command or macro

    Posted Tue April 08, 2025 02:37 AM

    Hi,

    The command to run is "show web-mgmt" to see the status of the webGUI.


    The "admin-state" needs to be set to "enabled" with these commands:
    # config

    # web-mgmt

    # admin-state enabled 

    # exit

    # write mem

    # top

    # exit



    ------------------------------
    Nick Cawood
    API Connect Consultant
    IBM Expert Labs
    IBM UK Ltd

    https://www.linkedin.com/in/nickcawood/
    ------------------------------



  • 5.  RE: web-mgmt - unknown command or macro

    Posted Fri April 11, 2025 10:45 AM

    Hi,

    I tried the following commands to remove temporarily ssl : 

    configure terminal
    web-mgmt
    no ssl-config-type
    no ssl-server
    exit
    write memory

    At the 'exit' command, it brings me out of 'idg', so I can't run the commande 'write memory' : 

    idg(config web-mgmt)# no ssl-config-type
    idg(config web-mgmt)# no ssl-server
    idg(config web-mgmt)# exit
    Connection to 172.19.88.32 closed by remote host.
    Connection to 172.19.88.32 closed.

    idg# show web-mgmt

    web-mgmt [up]
    --------
     admin-state enabled
     ip-address 0.0.0.0
     port 9090
     save-config-overwrite on
     idle-timeout 600 Seconds
     acl web-mgmt [up]
     ssl-config-type server
     enable-sts on

    Is there any solution to disable the SSL feature and access GUI using HTTP ?

    Regards,

    Abderrahmane Chaal



    ------------------------------
    Abderrahmane Chaal
    ------------------------------



  • 6.  RE: web-mgmt - unknown command or macro

    Posted Sun April 13, 2025 06:38 PM

    Hello,

    there is no way to disable TLS on the web ui. When you remove the custom ssl-server, DataPower will use the default which will present a certificate that is signed by a "dummy" ca and DOES NOT present an CN or SAN that correctly identifies the interface address or host name.

    Your browser MAY prevent access to the UI depending on browser configuration and which browser you use.

    As to your issue with the "write mem" command, that command needs to be issued from inside the configure terminal mode, before you issue the exit or top command that takes you to the top of the command mode. In your case, where it appears that your ssh session was disconnected when the change to web-mgmt was committed, you would need to log on again and then enter configure terminal mode, and then issue "write mem".

    Regards,



    ------------------------------
    Neil Casey
    Senior Consultant
    Syntegrity Solutions
    Melbourne, Victoria
    IBM Champion (Cloud) 2019-22
    ------------------------------



  • 7.  RE: web-mgmt - unknown command or macro

    Posted Mon April 14, 2025 07:52 AM

    Hi Neil,

    I ussued the command inside the config mode terminal : 

     
    idg(config web-mgmt)# no ssl-config-type
    idg(config web-mgmt)# no ssl-server
    idg(config web-mgmt)# write memory
    Unknown command or macro (write memory)
    idg(config web-mgmt)# exit
    Connection to 172.19.88.32 closed by remote host.
    Connection to 172.19.88.32 closed.
    the write mem command is unknown at the 'config web-mgmt' level. I tried to go back to 'config' level with an exit command then the connection has been closed.
    Is there any other workaround to fix this issue ? all what we need to do is to re import a new certificate and get access again to GUI.
    Regards,
    Abderrahmane Chaal


    ------------------------------
    Abderrahmane Chaal
    ------------------------------



  • 8.  RE: web-mgmt - unknown command or macro

    Posted Tue April 15, 2025 06:36 PM

    Hi Abderrahmane,

    That command log is somewhat strange. The disconnection after exiting web-mgmt mode is unexpected (at least by me).

    If you log in again after the disconnection, enter configure terminal mode, are you then able to issue write mem?

    And is the change you made to the configuration of web-mgmt still visible, or has it rolled back to the state with your custom ssl-server configuration still connected?

    Regards, 



    ------------------------------
    Neil Casey
    Senior Consultant
    Syntegrity Solutions
    Melbourne, Victoria
    IBM Champion (Cloud) 2019-22
    ------------------------------



  • 9.  RE: web-mgmt - unknown command or macro

    Posted Wed April 16, 2025 04:24 AM

    Hi Neil,

    Yes I am able to execute the command write memory but the configuration is still the same : 


    idg# configure terminal
    Global mode
    idg(config)# write memory
    Overwrite previously saved configuration? Yes/No [y/n]: y
    Configuration saved successfully.
    idg(config)# show web-mgmt

    web-mgmt [up]
    --------
     admin-state enabled
     ip-address 0.0.0.0
     port 9090
     save-config-overwrite on
     idle-timeout 600 Seconds
     acl web-mgmt [up]
     ssl-config-type server
     enable-sts on

    Regards,

    Abderrahmane Chaal



    ------------------------------
    Abderrahmane Chaal
    ------------------------------



  • 10.  RE: web-mgmt - unknown command or macro

    Posted Wed April 16, 2025 12:18 PM

    Hi Neil, 

    I have got access again to the DP GUI, the correct commands to execute are : 

    idg(config web-mgmt)# no ssl-server

    idg(config web-mgmt)# exit
    idg(config web-mgmt)# write memory
    The commad that was causing the ssh disconnection is : 
    idg(config web-mgmt)# no ssl-config-type
    So, there is no need to execute it.
    After saving the configuration I had access again to the GUI using HTTPS but with a self-signed certificate.
    I was able to upload a new certificate and a private key and executed the following commands to enable the SSL server profile again : 

    configure terminal

    web-mgmt

    ssl-config-type server

    ssl-server webUIserverprofile

    exit

    write memory

    Thanks a lot for your help.

    Regards,

    Abderrahmane Chaal



    ------------------------------
    Abderrahmane Chaal
    ------------------------------