Got it

Move 2: Using Authentication Exemption to View IP Traffic Ranking Highlighted

Latest reply: Feb 12, 2020 13:18:29 1842 2 0 0
Requirements
User authentication is not deployed, but you want to view the traffic volume and ranking of each IP address.


Implementation Solution
Use the authentication exemption function on the firewall.

USG2000/5000 V300R001
Configure authentication exemption for the users who use IP addresses as user names.
On the web UI, choose User > Internet Access User > Authentication Policy and create an authentication exemption policy.
Move 2: Using Authentication Exemption to View IP Traffic Ranking-1987573-1
The corresponding scripts are:
user-manage authentication-policy ip_traffic
 policy enable  
 ip-range 192.168.0.1 192.168.0.100  
 new-user add-temporary group root  
 authentication-mode none

After the preceding configuration is complete, you can view the traffic ranking of the top 10 IP addresses on the dashboard of the web UI.
Move 2: Using Authentication Exemption to View IP Traffic Ranking-1987573-2

Choose User > Internet Access User > Monitor. You can view the traffic of all IP addresses and also manually rank the traffic.

The default aging time of online users is 30 minutes. If no traffic is initiated from an IP address in 30 minutes, the corresponding entry is deleted. When the IP address goes online again, traffic statistics are re-collected.


USG6000 V100R001 and Later Versions
Dr. WoW is very sorry to tell you that on USG6000 V100R001 and later versions, authentication exemption does not support IP addresses as user names, but the USG6000 V100R001 and later versions allow specific users to log in with fixed IP addresses without authentication. That is, you can bidirectionally bind a user name and an IP address. Then the user can directly access services without entering the user name or password.
Speaking of this, Dr. WoW assumes that you have figured out the solution.
1. On the web UI, choose Policy > Authentication Policy and create an authentication exemption policy.
Move 2: Using Authentication Exemption to View IP Traffic Ranking-1987573-3

2.Choose Object > User > User/Group and create a user name for each IP address.
The user name can be any value. Here the IP address is used as the user name for easy memorization.

In the example, Dr. WoW manually creates a user. If there are many IP addresses, you can use a CSV file to import user information in a batch to the firewall.
Move 2: Using Authentication Exemption to View IP Traffic Ranking-1987573-4
The corresponding scripts are:
auth-policy
 rule name policy_auth_01
  source-address range 192.168.0.1 192.168.0.100
  action no-auth
user-manage user 192.168.0.1
 bind mode bidirectional
 bind ipv4 192.168.0.1


After the configuration is complete, when an IP address on the 192.168.0.1-192.168.0.100 network segment initiates access, you can choose Object > User > Online User to view the traffic from this IP address in the online user list. On USG6000 V100R001 and later versions, the dashboard of the web UI does not display the traffic ranking of the top 10 IP addresses.
 

This article contains more resources

You need to log in to download or view. No account? Register

x
  • x
  • convention:

Created Sep 20, 2016 02:34:51 Helpful(0) Helpful(0)

Thank you.
View more
  • x
  • convention:

NicolasThompson
Created Feb 12, 2020 13:18:29 Helpful(0) Helpful(0)

Alexa Traffic Rank and Visitor History for 11 Years Move 2: Using Authentication Exemption to View IP Traffic Ranking-3219734-1
https://www.rank2traffic.com/
View more
  • x
  • convention:

Comment

Comment
You need to log in to comment to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!

My Followers

Login and enjoy all the member benefits

Login

Huawei Enterprise Support Community
Huawei Enterprise Support Community
Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.