Solution to the problem in which the AV, IPS, and URL control items cannot be activated on the USG6300 series

0

The solution to the problem in which the AV, IPS, and URL control items cannot be activated on the USG6300 series is as follows:
If these control items are included in the license file but cannot be activated, check the following information:
1. Whether the software version is V100R001C10SPC200 (or V100R001C20) or later
2. Whether the AV, IPS, and URL control items match the product model. For example, the IPS for the USG6320 matches "USG6310/20 IPS upgrade service for 12 months".

Other related questions:
Problem and solution when the IPSec tunnel cannot be established between the USG6300 and Windows 8 system
The IPSec tunnel established using the Windows 8 dial-up software on the USG6000 is interrupted at a certain interval. You can use other VPN tunnels, such as L2TP.

Start time for the activation of license control items
The start time for the activation of license control items is calculated as follows: After the authorized ID and ESN are bound with the ESDP platform, a license file is generated. At this time, the ESDP system time is the activation time for all license control items. The validity period is calculated based on the activation time. After the license file is generated on the ESDP platform, immediately load it on a device and activate it to avoid resource waste.

Which control item of the U1980 license specifies permitted conference specifications?
The U1910 and U1930 do not provide license control items (by default, both U1910 and U1930 support a maximum of four conferences and 12 participants. Each conference hall supports a maximum of 12 participants). For the other U1900 models, you can query the maximum number of concurrent participants in a conference configured on the gateway. To achieve so, run the show license command and view the value of Conference users in the command output. For devices that support the management through the web UI, users can log in to the web management page of the device and choose System > View License to obtain the value of Conference users.

Problem and solution when the URL category query server fails to be connected
To locate and rectify the fault that the URL category query server fails to be connected, perform the following steps: 1. Check whether there is a URL remote query license. Check whether the URL remote query license is enabled and valid on the CLI or web UI. 2.Check whether the networking and the configuration is correct. a.Run the display url-filter global-configuration command to check whether the server state is Connected. If the state is another value, the server is not connected. b. Check whether the DNS server is correctly configured and test the connectivity between the device and the website sec.huawei.com. This website is Huawei security upgrade and authentication center. To connect to a URL remote query server, the device must pass authentication on this website. If the device cannot access the website, it cannot connect to the URL remote query server. c. Check the URL filtering profile.Run the display url-filter global-configuration command to check whether a country name is configured. If no country name is configured for the firewall, it cannot connect to the URL remote query server. d. Check related configurations on the device.View IPsec and tunnel configurations and check whether connection request packets enter IPsec tunnels. If so, analyze the networking and configuration and ensure that the packets can be correctly sent to the authentication center, scheduling server, and query server. e. View security policies and check whether security policies have blocked connection request packets.Several special IP addresses and port numbers are involved for URL server connections. Ensure that the packets sent to the URL servers can pass the check of security policies. f. Check whether the update host source command is configured.This command has an influence on the source address used to connect to the URL remote query server. If this command is configured, the specified interface address serves as the source address of query packets sent to the URL remote query server.If this command is configured, ensure that the packets in response to the packets sent from the specified address to the URL server can be properly forwarded to the device.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top