Command for enabling the web NMS of an AR router

7

The commands for enabling the web NMS of an AR router are as follows:
For routers that support the web NMS, enable the web function on the routers to enable the web NMS. Specific method is as follows:
[Huawei] http server enable //Enable the HTTP service.
[Huawei] http secure-server enable //Enable the HTTPS service.

Other related questions:
How to enable the web function on an AR router
The methods of enabling the web function on an AR router are as follows: Method 1: Default web login 1. Connect a PC to the router over the management interface through a network cable. 2. Configure an IP address for the PC. Configurable network segment: 192.168.1.2~192.168.1.254. 3. Open a browser, enter the URL "https://192.168.1.1" in the address bar, and click Enter to enter the user login page. 4. Enter login information. 5. Configure the router through the web NMS page. Note: If you cannot enter the web NMS page, the software version you use does not support the default web login method. Please try the following method: Method 2: Non-default web login 1. Connect a PC to the router over the CON/AUX interface through a console configuration cable. 2. Enable the terminal emulation software on the PC, create a connection, and set an interface for the connection and other communication parameters. 3. Press Enter until the following information is displayed to remind users of configuring a verification code. 4. Connect a PC to the router over the management interface through a network cable. 5. Configure an IP address for the router for management. 6. Enable the web service. 7. Configure an HTTPS user and a user level. 8. Configure an IP address for the PC. 9. Open a browser, enter the URL "https://192.168.1.1" in the address bar, and click Enter to enter the user login page. 10. Configure the router through the web NMS page.

On which interface is the default management IP address of an AR router configured
From specified versions on, the router is configured with a management IP address in factory setting and the web NMS is enabled.

How to disable the web function on an AR router
How to disable the web function on an AR router? For routers that support web NMS, disable the HTTP server on the routers to disable the web function. Specific method is as follows: [Huawei] undo http server enable //Disable the HTTP service. [Huawei] undo http secure-server enable //Disable the HTTPS service.

Configure a blacklist of an AR router
A blacklist can be manually configured. After the address scan and port scan functions of the attack defense module are enabled on an AR router, an IP address (or an interface) for which the packet rate exceeds a set value can be automatically added into a blacklist to shield packets sent from this IP address (or through this interface) as the router considers the rate excess as a scan attack. To configure a blacklist, do as follows: Run the system-view command to access the system view. [Huawei] firewall blacklist enable //Enable the blacklist function. By default, the blacklist function is not enabled. Blacklist entries can be added one by one or in batches. [Huawei] firewall blacklist ip-address [ vpn-instance vpn-instance-name ] [ expire-time minutes ] //Add blacklist entries one by one. Note: Blacklist entries without specified aging time will be written into a configuration file, while those with specified aging time will not. Run the display firewall blacklist command to check the blacklist entries without specified aging time. [Huawei] firewall black-white-list load configuration-file configuration-file-name //Load the configuration file of the blacklist/whitelist. Note: By loading the configuration file of the blacklist/whitelist, blacklist entries can be configured in batches. This configuration file must be configured in advance, and it supports only the text format. For details about how to configure the blacklist function of AR series routers using command lines and through the web NMS, see the URL: AR router configuration blacklist.

Configure a whitelist of an AR router
A device is added to a whitelist to avoid being added into a blacklist if the legal service packets sent by this device boast the features of IP scan attack and port scan attack. To configure whitelist entries one by one, do as follows: Run the system-view command to access the system view. [Huawei] firewall whitelist ip-address [ vpn-instance vpn-instance-name ] [ expire-time minutes ] //Add whitelist entries one by one. To configure whitelist entries in batches, do as follows: By loading the configuration file of the whitelist, whitelist entries can be configured in batches. This configuration file must be configured in advance, and it supports only the text format. The configured whitelist does not need to be enabled, and the whitelist entries automatically take effect. system-view //Access the system view. [Huawei] firewall black-white-list load configuration-file configuration-file-name //Load the configuration file of the whitelist. For details about how to configure the whitelist function of AR series routers using command lines and through the web NMS, see the URL: AR router configuration whitelist .

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top