Hello, all!
This is a case about failure to login to DeviceManager and CLI due to incorrect security policy configuration.
Symptoms
The security policy is enabled on the DM, and only invalid IP addresses are added to the list of accessible IP addresses. As a result, the DM and CLI cannot be accessed.
Cause
If security restriction is enabled, the device can only be accessed by the IP addresses in the IP address list.
Customer configuration error. The security policy for accessing the storage device from a specified IP address is enabled, but the configured storage port IP address or invalid IP address is configured. As a result, the security policy restricts the login mode of authorized terminals to the storage device and CLI.
Analysis
1. Ask the customer whether to enable security restrictions.
2. Log in to the device through the serial port and run the show security_rule command to check whether the security policy is enabled and the IP addresses that can be accessed.
Solution
1.Log in to the storage device through the serial port and disable the security rule, run change security_rule enabled enabled=no.
2.Reconfigure the security policy, add the IP addresses that are allowed to access the storage to the security rule, add a single IP: add security_rule ip_list=x.x.x.x, and add IP address segment: add security_rule ip_list==x.x.x.x -=x.x.x.x.
3. Enable security restrictions,run cmd change security_rule enabled enabled=yes.
This is what I would do if I encountered this problem, you are welcome to share your input too!
