Huawei USG6000 Upgrade Manual page 16

HUAWEI USG6000&USG9500
Upgrade Guide
The command
[ undo ] web-manager
security verify-ssl-peer
[ undo ] web-manager
security ca-certificate ca-
certificate-name
[ undo ] banner enable
[ undo ] mac-access-profile
access-profile-name
hwtacacs-server accounting
ip-address [ port ] [ vpn-
instance vpn-instance-
name ] [ secondary | third ]
ldap-server source
{ loopback interface-
number | ip-address ip-
address | vlanif interface-
number }
undo ldap-server source
ad-server source { loopback
interface-number | ip-
address ip-address | vlanif
interface-number }
display ike sa [ remote
{ ipv4-address | ipv6-
address } ] [ slot slot-id cpu
cpu-id ] [ active | standby ]
display ike sa [ slot slot-id
cpu cpu-id ] [ active |
standby ] [ remote-id-type
remote-id-type ] remote-id
remote-id
Issue 01 (2018-01-16)
Description
The command disables
bidirectional certificate
authentication between the
FW and client.
The command enables/
disables bidirectional
certificate authentication
between the FW and client.
The command enables/
disables the display of the
system banner.
The command binds/
unbinds an authentication
profile to a MAC access
profile
The command configures an
HWTACACS accounting
server.
The command configures
the source IP address that a
device uses when sending
packets to the LDAP server.
The command restores the
default configuration. By
default, when a device sends
packets to the LDAP server,
the IP address of the actual
outbound interface is used
as the source IP address.
The command configures
the source IP address that a
device uses when sending
packets to the AD server.
The command displays
information about SAs
established through IKE
negotiation.
The command displays
information about SAs
established through IKE
negotiation.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1 USG6000
Impact
None
None
None
None
None
None
None
None
None
None
7