Login through a WAN interface to the USG6000 series

2

To log in to the USG6000 series from a WAN interface, do as follows:
On the WAN interface editing page, select Enable access management, and select HTTP and HTTPS to allow users to access the interface through HTTP and HTTPS to manage the device.

Other related questions:
Login through a WAN interface to the USG2000&5000 series
To log in to the USG2000&5000 series from a WAN interface, do as follows: On the WAN interface editing page, select Enable access management, and select HTTP and HTTPS to allow users to access the interface through HTTP and HTTPS to manage the device.

Login to the USG6000 series in Layer-2 transparent access mode through a service interface
Login to the USG6000 series in Layer-2 transparent access mode through a service interface The service interface is a Layer-2 interface. It must be added to a VLAN. Then, you can log in to the device through the VLANIF interface. For example, two service interfaces are GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2. The configuration is as follows: # Create a VALN and add the interface to the VLAN (by default, the interface belongs to VLAN1). system-view [NGFW] vlan 2 [NGFW-vlan-2] quit [NGFW] interface GigabitEthernet 1/0/1 [NGFW-GigabitEthernet1/0/1] portswitch [NGFW-GigabitEthernet1/0/1] port access vlan 2 [NGFW-GigabitEthernet1/0/1] quit [NGFW] interface GigabitEthernet 1/0/2 [NGFW-GigabitEthernet1/0/2] portswitch [NGFW-GigabitEthernet1/0/2] port access vlan 2 [NGFW-GigabitEthernet1/0/2] quit # Configure a VLANIF interface. [NGFW] interface vlanif 2 [NGFW-Vlanif2] ip address 10.1.3.1 24 [NGFW-Vlanif2] service-manage enable [NGFW-Vlanif2] service-manage stelnet permit [NGFW-Vlanif2] service-manage https permit [NGFW-Vlanif2] quit [NGFW] firewall zone trust [NGFW-zone-trust] add interface vlanif 2 [NGFW-zone-trust] quit After the configuration is complete, you can log in to the device through 10.1.3.1.

How to select a WAN interface through the web NMS on an AR router
Check whether the Layer 3 Ethernet interface is switched over to a Layer 2 Ethernet interface. The procedure of converting the Layer 2 mode of a physical interface to the Layer 3 mode is as follows: 1. Choose LAN access > LAN > Physical interface to enter the physical interface configuration page. 2. In the operation column of the physical interface list, click the icon at the right side of details corresponding to a desired physical interface to switch over the physical interface between Layer 2 mode and Layer 3 mode. 3. In the prompt dialog box, click Yes to confirm the switchover.

Method used to disable the interface access function for the USG6000 series on the CLI
The following example is provided for you to disable the interface login for the USG6000 series on the CLI: # On GigabitEthernet 1/0/1, configure to prohibit the administrator from accessing the device using HTTP. system-view [sysname] interface GigabitEthernet 1/0/1 [sysname-GigabitEthernet1/0/1] service-manage http deny This configuration has a higher priority than security policies. After the configuration completes, even you are allowed to access the local zone from the interface locating security zone, as an administrator, you still cannot log in to the device through the interface.

Why do I fail to log in to the AR through the console interface
Use the following method:
1. Check whether parameter settings on the console interface are correct.
   - Baud rate: 9600
   - Data bit: 8
   - Stop bit: 1
   - Parity check: none
   - Flow control: none
2. Check whether the console cable is securely connected. If necessary, replace the current cable with a new one to check whether the cable is faulty.   
3.  By default, no flow control mode is configured on an AR. Because RTS/CTS is selected in the software by default, you need to deselect RTS/CTS; otherwise, you cannot enter commands.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top