AC6508 http server-source command not recognized

Hi,
What is the NAT rule configuration on the firewall? When specifying the source address, is this address accessible from the internet?

Oscar123,
OK, if the NAT policy is OK, then I would suggest you checking the routing table on the AC if there is a backward route.
BTW, the device supports specifying the server source address only when enabling the HTTPS service.

Hi Chenhui,

Thanks for your quick response.
When I check http info, it shows:
HTTPS SSL Policy : default_policy
Web package : web.7z (default)
HTTP server permit interface :
Is it normal that the " HTTP server permit interface " show no value?

Not sure how to check for a backward route, could you help me for that?
Here is the route table:
Destination/Mask Proto Pre Cost Flags NextHop Interface

10.20.0.0/22 Direct 0 0 D 10.20.0.2 Vlanif1
10.20.0.2/32 Direct 0 0 D 127.0.0.1 Vlanif1
10.20.3.255/32 Direct 0 0 D 127.0.0.1 Vlanif1
10.20.148.0/22 Direct 0 0 D 10.20.148.1 Vlanif10
10.20.148.1/32 Direct 0 0 D 127.0.0.1 Vlanif10
10.20.151.255/32 Direct 0 0 D 127.0.0.1 Vlanif10
127.0.0.0/8 Direct 0 0 D 127.0.0.1 InLoopBack0
127.0.0.1/32 Direct 0 0 D 127.0.0.1 InLoopBack0
127.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0
169.254.3.0/24 Direct 0 0 D 169.254.3.1 Ethernet0/0/47
169.254.3.1/32 Direct 0 0 D 127.0.0.1 Ethernet0/0/47
169.254.3.255/32 Direct 0 0 D 127.0.0.1 Ethernet0/0/47
255.255.255.255/32 Direct 0 0 D 127.0.0.1 InLoopBack0

Hi,
It's OK that the HTTP server permit interface shows no value, cause you don't configure the 'http secure-server server-source'.
From the routing table on your device, there are no backward routes if you configure only the destination NAT or nat server on the firewall.
Please confirm which NAT type do you configure on the firewall. Destination NAT, nat server, or bidirectional NAT?

This is what I create:

AC6005 is the controller ip, 10.20.0.2

From the NAT configuration, there might be two problems.

1. You don't select destination port translation, which means while the internet user accesses the port TCP 21443(I think the port value is TCP 21443), the packet will be forwarded to the AC with the same port, TCP 21443, I'm not sure if you assign the HTTPS server port to TCP 21443 on the AC, if not, the AC will drop the packet. I suggest you enable the destination port translation and set the value to TCP 443 if you don't assign the HTTPS server port on the AC.

   
   

   

2. You configure the address to address destination NAT, not the bidirectional NAT. As I said previously, there are no backward routes on the AC. To resolve this problem, you have two choices. The first one, the simplest way, configure a default route on the AC to guide the traffic back to the firewall. The second one, modify the NAT policy to a bidirectional policy, translating the source addresses, the accessing internet users, to private addresses, 10.20.0.x. 

   Please be noticed, the first one is simple to implement, but you should be careful about the potential network loop. The second way is complicated to implement, but it's suggested.

BTW, while you provide your logs, configuration, and devices' information, please erase the private information, such as public IP addresses, port numbers due to network security.