Whether the USG6000 supports configuration using the CLI

13

The USG6000 supports configuration using the CLI.

Other related questions:
Whether the USG2000 or USG5000 supports configuration using the CLI
The USG2000 or USG5000 supports configuration using the CLI.

Configuration of using a non-management interface to manage the USG6000 series on the CLI
To manage the USG6000 series through a non-management interface, you can configure the CLI as follows: # On GigabitEthernet 1/0/1, configure to allow the administrator to access the device using HTTP. system-view [sysname] interface GigabitEthernet 1/0/1 [sysname-GigabitEthernet1/0/1] service-manage http permit This configuration has a higher priority than security policies. After enabling access management on the interface, even if the security policy between the local zone and the interface locating security zone is disabled, as an administrator, you can still log in to the device through the interface.

Configuring global NAT ALG through the CLI on the USG6000
To simplify configurations, the USG6000 series supports configuring the global NAT ALG function. Enabling the global ASPF function equals to enabling the interzone and intrazone NAT ALG functions. The global NAT ALG function and interzone/intrazone NAT ALG function are logically ORed. Select one of them as required. For example, configure the global NAT ALG function to detect FTP traffic. system-view [sysname] firewall detect ftp

Configuration of traffic mirroring on the CLI for the USG6000 series
The USG6000 series does not support traffic mirroring.

Configuring intrazone ASPF through the CLI on the USG6000
The USG6000 series supports configuring the intrazone ASPF function through the CLI. For example, enable the ASPF function for the FTP protocol in the Trust zone. system-view [sysname] firewall zone trust [sysname-zone-trust] detect ftp The protocol types that can be detected in the intrazone view include DNS, FTP, H.323, ILS, MGCP, MMS, MSN, NetBIOS, PPTP, QQ, RTSP, SIP, and SQL.NET.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top