Hi ster,
Because the out-of-band management interface of the USG9520 main control board is bound to the default VPN instance by default, common ACL rules do not take effect. Therefore, you need to add the VPN-instance keyword when creating and configuring an ACL. The correct ACL configuration is as follows:
#
acl number 2077 vpn-instance default
rule 5 permit source 218.15.240.0 0.0.0.31
rule 10 permit source 14.119.127.0 0.0.0.255
rule 15 permit source 192.168.1.0 0.0.0.255
rule 100 deny
#
user-interface vty 0 4 // vty view calls acl to restrict login
acl 2077 inbound
authentication-mode aaa
protocol inbound all
#
If you have any problems, please post them in our Community. We are happy to solve them for you!