"в начале было слово..." управления безопасности: удалить доступ по http, поменять имена логинов администраторов с "admin" на "ivanov".
Насколько помню, переименовать там было нельзя, поэтому были созданы новые учетки админов с такими же ролями. Новые учетки были проверены логоном, потом удален admin. Через пару недель понадобилось зайти по https на WLC и ...фигушки.

Что имею сейчас:
- WI-Fi работает для юзеров как и раньше, логинит через web по RADIUS, выдает адреса, пускает в Инет;
- лобби-админ с локальной учеткой тоже может зайти и делать свои дела;
- при попытке зайти https://wlc/ выдает диалог логин-пароль, но никакой пароль не принимает, после скольких-то попыток дает 401 ошибку;
- при попытке зайти с ssh дается User:, вбиваю имя, выдает password:, вбиваю пароль, опять пишет User:
- при попытке зайти с CON никакой реакции нет и ничего не отображается (кабель и ноут в порядке, втыкаю в соседнюю циску там все гут);
- при попытке  зайти с CON и перегрузить WLC по питанию, идет загруз (см ниже) потом пишется что-то типа "введите пароль или Recovery-config для заводских настроек", ниже выдается user:, но после этого никакой реакции на нажатие клавиш даже Enter и Crtl-С

Т.е. даже в заводские настройки скинуть WLC не могу! утопленной кнопки на корпусе не видно (в стойке темновато)
Спасибо за любые подсказки!

"

WLCNG Boot Loader Version 1.0.20 (Built on Jan  9 2014 at 19:02:44 by cisco)
Board Revision 0.0 (SN: PSZxxxxxxxR, Type: AIR-CT2504-K9) (P)

Verifying boot loader integrity... OK.

OCTEON CN5230C-SCP pass 2.0, Core clock: 750 MHz, DDR clock: 330 MHz (660 Mhz data rate)
CPU Cores:  4
DRAM:  1024 MB
Flash: 32 MB
Clearing DRAM........ done
Network: octeth0', octeth1, octeth2, octeth3
  ' - Active interface
  E - Environment MAC address override
CF Bus 0 (IDE): OK
IDE device 0:
- Model: 1GB CompactFlash Card Firm: CF B61FK Ser#: @77xxxxxxxxxxxxN
- Type: Hard Disk
- Capacity: 977.4 MB = 0.9 GB (2001888 x 512)

Press <ESC> now to access the Boot Menu...

Loading primary image (8.2.130.0)
100%

36672221 bytes read
Launching...
Launching images...
init started: BusyBox v1.6.0 (2010-05-13 17:50:10 EDT) multi-call binary
starting pid 690, tty '': '/etc/init.d/rcS'
Decompressing... OK
Validating...... OK
Detecting Hardware ...
Installing ether-pow driver - 0x6008
starting pid 907, tty '/dev/ttyS0': '/usr/bin/gettyOrMwar'
Setting up ZVM
Exporting LD_LIBRARY_PATH

Cryptographic library self-test....
Testing SHA1 Short Message 1
Testing SHA256 Short Message 1
Testing SHA1 Short Message 1
SHA1 POST PASSED
passed!

XML config selected
Validating XML configuration
octeon_device_init: found 1 DPs
/dev/fpga: No such device or address
readCPUConfigData: cardid 0x6060001
The string is NULL in xml_null_string_check for node ptr_simVlanCfgData.simInterface.vlanDhcpLinkSel.linkSelRelaySrc
Validation for node ptr_simVlanCfgData.simInterface.vlanDhcpLinkSel.linkSelRelaySrc failed, indices for node are 0
Cisco is a trademark of Cisco Systems, Inc.
Software Copyright Cisco Systems, Inc. All rights reserved.

Cisco AireOS Version 8.2.130.0
Firmware Version PIC 20.0

Initializing OS Services: ok
Initializing Serial Services: ok
Initializing Network Services: ok
Initializing Licensing Services: ok

License daemon start initialization.....
Starting Statistics Service: ok

License daemon running.....
Starting Licensing Services: ok
Starting ARP Services: ok
Starting Trap Manager: ok
Starting Network Interface Management Services: ok
Starting System Services: ok
Starting FIPS Features: ok : Not enabled
Starting SNMP services: ok
Starting Fastpath Hardware Acceleration: ok
Starting Fastpath Console redirect : ok
Starting Fastpath DP Heartbeat : ok
Fastpath CPU0.00: Starting Fastpath Application. SDK-1.8.0, build 269. Flags-[DUTY CYCLE] : ok
Fastpath CPU0.00: Initializing last packet received queue. Num of cores(2)
Fastpath CPU0.00: Init MBUF size: 1856, Subsequent MBUF size: 2040
Fastpath CPU0.00: Core 0 Initialization: ok
Fastpath CPU0.00: Initializing Timer...
Fastpath CPU0.00: Initializing Timer...done.
Fastpath CPU0.00: Initializing Timer...
Fastpath CPU0.00: Initializing NBAR AGING Timer...done.
Fastpath CPU0.01: Core 1 Initialization: ok
Starting Switching Services: ok
Starting QoS Services: ok
Starting Policy Manager: ok
Starting Data Transport Link Layer: ok
Starting Access Control List Services: ok
Starting System Interfaces: ok
Starting Client Troubleshooting Service: ok
Starting Certificate Database: ok
Starting VPN Services: ok
Starting Management Frame Protection: ok
Starting DNS Services: ok
Starting Redundancy: ok
Start rmgrPingTaskok
Starting LWAPP: ok
Starting CAPWAP: ok
Starting LOCP: ok
Starting Security Services: ok
Starting Policy Manager: ok
Starting Authentication Engine: ok
Starting Mobility Management: ok
Starting Ethernet-over-IP: ok
Starting Capwap Ping Component: ok
Starting AVC Services: ok
Starting AVC Flex Services: ok
Starting Virtual AP Services: FP0.00:Max core is 2
ok
Starting AireWave Director: ok
Starting Network Time Services: ok
Starting Cisco Discovery Protocol: ok
Starting Broadcast Services: ok
Starting Logging Services: ok
Starting DHCP Server: ok
Starting IDS Signature Manager: ok
Starting RFID Tag Tracking: ok
Starting RF Profiles: ok
Starting Power Supply and Fan Status Monitoring Service: ok
Starting Mesh Services:  ok
Starting TSM: ok
Starting CIDS Services: ok
Starting Ethernet-over-IP: ok
Starting DTLS server:  enabled in CAPWAP
Starting CleanAir: ok
Starting WIPS: ok
Starting SSHPM LSC PROV LIST: ok
Starting RRC Services: ok
Starting SXP Services: ok
Starting Alarm Services: ok
Starting FMC HS: ok
Starting IPv6 Services: ok
Starting Config Sync Manager : ok
Starting Hotspot Services: ok
Starting Tunnel Services New: ok
Starting Portal Server Services: ok
Starting mDNS Services: ok
Starting Management Services:
   Web Server:    CLI:    Secure Web: ok"