Configuration of using a non-management interface to manage the USG6000 series on the CLI

To manage the USG6000 series through a non-management interface, you can configure the CLI as follows:
# On GigabitEthernet 1/0/1, configure to allow the administrator to access the device using HTTP.
system-view
[sysname] interface GigabitEthernet 1/0/1
[sysname-GigabitEthernet1/0/1] service-manage http permit
This configuration has a higher priority than security policies. After enabling access management on the interface, even if the security policy between the local zone and the interface locating security zone is disabled, as an administrator, you can still log in to the device through the interface.

Scroll to top