User access restriction

Latest reply: Dec 29, 2018 06:39:06 179 5 8 1

Problem description:

During the use of a user, it is found that a user should not access the IP address (should be accessed).


Troubleshooting Method:

1. Check the security group to which the user belongs.

display  access-user user-id XXXX

2. Check the policy whose source is the user group.

display  acl all | in STAFF_WIRELESS_CITD

3. Ping the faulty IP address from the source IP address of the user gateway on the core network.

4. Tracert the faulty IP address on the faulty PC.


Troubleshooting result

The security policy is incorrect.

The permit or deny action is incorrect.

 Check whether free rule is allowed.

The route from the network segment to the faulty address is faulty.

  • x
  • convention:

yiyi0519
Created Dec 26, 2018 01:04:43 Helpful(0) Helpful(0)

Look at the description of this problem is that the wireless access user can not obtain the IP address and can not access normally, the processing steps are very clear
  • x
  • convention:

No.9527
Created Dec 26, 2018 03:18:10 Helpful(0) Helpful(0)

Controllable feature:

This license controls the number of BAS access users. Each license allows the access of 1000 users.
BRAS access if not supported on an X3 MPUD2 (2G memory) and MPUK.
  • x
  • convention:

GongXiaochuan
Created Dec 28, 2018 02:21:59 Helpful(0) Helpful(0)

A filesystem ACL is a data structure (usually a table) containing entries that specify individual user or group rights to specific system objects such as programs, processes, or files. These entries are known as access-control entries (ACEs)
  • x
  • convention:

Good Good Study Day Day Up
Finn92
Created Dec 29, 2018 02:21:53 Helpful(0) Helpful(0)

. Check the security group to which the user belongs.

display access-user user-id XXXX

2. Check the policy whose source is the user group.

display acl all | in STAFF_WIRELESS_CITD

3. Ping the faulty IP address from the source IP address of the user gateway on the core network.

4. Tracert the faulty IP address on the faulty PC.

the method is very useful for many kinds issue , thank you .
  • x
  • convention:

SupperRobin
Created Dec 29, 2018 06:39:06 Helpful(0) Helpful(0)

. Check the security group to which the user belongs.

display access-user user-name
display access-user mac-address
display access-user ip-address
  • x
  • convention:

Comment

Reply
You need to log in to reply to the post Login | Register

Notice Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Login and enjoy all the member benefits

Login and enjoy all the member benefits

Login