Hello and welcome to this lecture in this lecture we're going to talk about the management of the four
legged firewalls as you have seen up to this point we can access and manage the floodgates through the
CLIA so through the castle.
But there is also another option which I'm sure you would enjoy.
And this one is the graphical user interface.
Well in order to access the the 48 firewalls through the gate we will use H2 to be protocol.
And again we have to make sure that we have access to these 48 firewalls.
So two five three.
It's the it's the second for the gate.
And let's test again 2 5 4.
And this one responds to ICMP.
Perfect.
Now what we have to do is go on to a browser.
I am now opening Microsoft Edge.
And here is 1 9 2 1 6 8 100 a dash.
Sorry.
So 1 9 2 1 6 8.
One hundred two five four.
And we have another one for the second.
So 2 5 3.
So I am now opening two ATP sessions to them.
So I want to manage them through HDP.
It's easier in graphical user interface than just typing on the CLIA.
But it seems that it's not working.
So we can really this page but at the same time we have seen that ICMP connectivity is working.
So again what could be the issue.
Well remember we have talked up to this point about some some protocols being allowed or added to the
list so that in that case ICMP to work.
Right.
So this time it's basically the same thing.
So we have connectivity to both of the firewalls but ATP sessions or H2 sessions are not permitted to
these machines.
So let's go to the CLIA.
This one is 48 1.
I will now log in.
So admin no password just hit enter and let's check the configuration for Port 2.
So show system interface port to.
I'm not using question mark because I want to see exactly the running configuration so I now hit enter
and we can see that in the allow access list we have now ping which we have added earlier in order to
have connectivity ICMP connectivity between the land P.C. and this specific firewall.
Now let's also add HDP HDP us so that we can manage the 48 firewall through on ETP session.
Let's go on and say config sys interface and I will edit port 2 instead of saying Sep allow access it
will override the existing configuration if you do that I would say append so add something else to
the allow access list and if I hit now question mark you can see here HDP H2 G.P.S. access.
So let's add this ETP and if GDP is 80 percent GDP and and this should work now.
Right.
So let's try and refresh the page so refresh
and here it is.
So now I'm being asked for username and password credentials.
I will do an admin on the user nothing for the password click log in
and here it is.
So I am now able to log in to the graphical user interface in order to manage this 48 firewall let us
do the same for the second one.
So again go to the gate 2.
I will now log in with admin and no password.
Let's show system interface port 2 This is facing the lamb we have only ping we should add something
else right.
So HDP so config sys interface and let's say edit port to to edit port 2 again I will not say set allow
access in order.
Well let's do it.
So set allow access HDP and H2 G.P.S..
I'll now say and and say show sys interface port to in order to see the current applied configuration.
So now you see that when doing only when doing said allow access only those specific options that you
will put there will be added and old ones will be overridden.
So now if you go and try to ping again.
So 2 5 3.
So the second 48 it will not work anymore.
So let's debate the proper way now.
For you to configure system interface edit port 2 and append allow access also ping and end
going back to the command prompt
I will be able to issue another ping.
So let's say 2 5 3 and now the ping is successful.
Let's get back to Microsoft Edge and try also to connect to the HDP through HDP to the second 48.
So now one into wanting say 100 die and that 2 5 3 log in credentials admin no password hit enter and
I shouldn't be provided graphical user interface in order to configure the firewall so 48 1 one it's
okay.
Yes.
Here is the hostname that we have defined previously 48 1.
Let's go to 48 to now.
So it's now loading the page.
So here it is.
Now we have gained access in order to configure or verify and manage both of the 48.
And guess what.
Because now we have access to this to this interface.
If you go to whatever 48 you want and if you're running if you're running the graphical user interface
but at any point you need because there are some some of the cases like this you need to go to the CLIA.
Here is the magic button to do it.
So if I click this one it will open a CLIA console so that I can access through the site through the
console the following 48 from the Web from the web interface.
So this is it.
So show what.
Let's show an interface.
I don't know.
Show system interface port to the one that we have configured.
Here is the configuration the IP and the allowed access protocol list.
So thank you for viewing and see you in the next lecture.