Got it

User access restriction

Latest reply: Dec 29, 2018 06:39:06 251 5 8 1

Problem description:

During the use of a user, it is found that a user should not access the IP address (should be accessed).


Troubleshooting Method:

1. Check the security group to which the user belongs.

display  access-user user-id XXXX

2. Check the policy whose source is the user group.

display  acl all | in STAFF_WIRELESS_CITD

3. Ping the faulty IP address from the source IP address of the user gateway on the core network.

4. Tracert the faulty IP address on the faulty PC.


Troubleshooting result

The security policy is incorrect.

The permit or deny action is incorrect.

 Check whether free rule is allowed.

The route from the network segment to the faulty address is faulty.

  • x
  • convention:

yiyi0519
Created Dec 26, 2018 01:04:43 Helpful(0) Helpful(0)

Look at the description of this problem is that the wireless access user can not obtain the IP address and can not access normally, the processing steps are very clear
View more
  • x
  • convention:

No.9527
Created Dec 26, 2018 03:18:10 Helpful(0) Helpful(0)

Controllable feature:

This license controls the number of BAS access users. Each license allows the access of 1000 users.
BRAS access if not supported on an X3 MPUD2 (2G memory) and MPUK.
View more
  • x
  • convention:

GongXiaochuan
Created Dec 28, 2018 02:21:59 Helpful(0) Helpful(0)

A filesystem ACL is a data structure (usually a table) containing entries that specify individual user or group rights to specific system objects such as programs, processes, or files. These entries are known as access-control entries (ACEs)
View more
  • x
  • convention:

Good Good Study Day Day Up
Finn92
Created Dec 29, 2018 02:21:53 Helpful(0) Helpful(0)

. Check the security group to which the user belongs.

display access-user user-id XXXX

2. Check the policy whose source is the user group.

display acl all | in STAFF_WIRELESS_CITD

3. Ping the faulty IP address from the source IP address of the user gateway on the core network.

4. Tracert the faulty IP address on the faulty PC.

the method is very useful for many kinds issue , thank you .
View more
  • x
  • convention:

SupperRobin
Created Dec 29, 2018 06:39:06 Helpful(0) Helpful(0)

. Check the security group to which the user belongs.

display access-user user-name
display access-user mac-address
display access-user ip-address
View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."

My Followers

Login and enjoy all the member benefits

Login

Huawei Enterprise Support Community
Huawei Enterprise Support Community
Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.