Method used to disable the interface access function for the USG6000 series on the CLI

The following example is provided for you to disable the interface login for the USG6000 series on the CLI:
# On GigabitEthernet 1/0/1, configure to prohibit the administrator from accessing the device using HTTP.
system-view
[sysname] interface GigabitEthernet 1/0/1
[sysname-GigabitEthernet1/0/1] service-manage http deny
This configuration has a higher priority than security policies. After the configuration completes, even you are allowed to access the local zone from the interface locating security zone, as an administrator, you still cannot log in to the device through the interface.

Scroll to top