Only a part of users are allowed to access the web pages of an AR router

20

You can configure ACL rules on an AR router to control web access permission. The configuration can be implemented using command lines or through the web NMS.
1. Command lines: For the sake of security, configure an ACL on the router to limit clients which can log in to the device in HTTPS mode if the device is used as an HTTPS server.
[Huawei] acl 2000 //Set the ACL number of an HTTPS IPv4 server to 2000.
[Huawei-acl-basic-2000] rule 5 permit source 10.1.1.1 0
[Huawei-acl-basic-2000] quit
[Huawei] http acl 2000 //Configure an HTTP login limit.
2. Web NMS: For details, choose Web-based Configuration > Security > ACL.

Other related questions:
Why do WLAN devices allow only some users to access the web page
WLAN devices allow only some users to access the web page: When a WLAN device functions as an HTTPS server, you can configure an ACL on the device to allow only the specified clients to log in to it through HTTPS. This function improves system security. [Huawei] acl 2000 //Set the ACL number to 2000 for the HTTPS IPv4 server. [Huawei-acl-basic-2000] rule 1 permit source 10.1.1.1 0 //Allow only users on the network segment 10.1.1.1 to access the web page. [Huawei-acl-basic-2000] quit [Huawei] http acl 2000 //Configure the HTTP login restriction.

Incomplete web page menu on an AR router
The problem is caused due to insufficient user permissions: The default level of web users is 0, which indicates that the users can only use network diagnosis commands (ping and Tracert) or query basic information. You can improve user permissions using command lines or through the web NMS. 1. Command lines: Configure a user level in the AAA view. [Huawei] aaa [Huawei-aaa] local-user huawei password irreversible-cipher Huawei@123 [Huawei-aaa] local-user huawei service-type http //An account with the login mode containing the HTTP type has the web login permission. [Huawei-aaa] local-user huawei privilege level 15 //Change the user permission to the administrator level. [Huawei-aaa] quit [Huawei] quit In the user view, run the save command to save the configuration, and re-log in to a web page for verification. 2. Web NMS: Log in to the web NMS using the super administrator account, and choose Web-based Configuration > User Management > User Management to change the user permission.

What is the port for remotely accessing the BMU through web pages?
The port for logging in to the BMU administrator page is 18443. The port for logging in to the personal self-service platform is 8443.

How to configure access control for AR routers on web pages
AR routers support Classic and EasyOperation web systems. You can configure access control in two web systems as follows: Classic web system: 1. Log in to the web system and choose System Management > System Configuration > Service Management to access the Service Management page. 2. In the Service Management area, click Enabled in the Value-added security service line, and click Apply. The deep security defense function is enabled. 3. Choose System Management > System Configuration > Service Management to access the Service Management page. 4. In the Application interface line, select the interface to which online behavior management is to be applied. 5. Click Apply. EasyOperation web system: 1. Choose Configuration > Network Behavior Management > Website Access Control to access the Website Access Control page. 2. Set User group name by selecting a user group from the drop-down list box or creating a user group. 3. Set other parameters based on the site requirements. 4. Click OK.

How to upgrade the system software through the web NMS on an AR router
To upgrade the system software through the web NMS on an AR router, do as follows: 1. Choose System Management > Upgrade and Maintenance > System Software. 2. Click Browse, and select the system software to be uploaded. 3. Click Load to upload the system software to a device, and specify the software as the system software of the device during next-time startup. Restart the device to validate the configuration.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top