Help Center/ Huawei Qiankun CloudService/ Security Cloud Services/ Qiankun Shield and Firewall Onboarding/ Onboarding USG6000E Series Firewalls/ Checking the Interconnection Result
Updated on 2024-01-24 GMT+08:00
View PDF
Share

Checking the Interconnection Result

Procedure

  1. Access the standard configuration page at https://192.168.0.1:8443.
  2. Choose System > Administrator > Service Settings. In the Northbound Interface Settings area, view the northbound connection status.

    If Status is Connected, the interconnection is successful. If the interconnection fails, see Troubleshooting.

    Figure 1 Checking the connection status

Troubleshooting

If the Qiankun Shield device fails to go online, perform the following steps:

  1. Check whether the action of the default security policy is Permit. If not, change the action to Permit.
    Figure 2 Security policy

  2. In the lower right corner of any page, click CLI Console.
    Figure 3 Security policy

  3. Perform the operations shown in the following figures to enter the system view.
    Figure 4 Entering the system view

  4. Run the ping command to check whether the communication between the device and the gateway on the customer network is normal.

    ping 10.1.1.254 //Use the actual gateway IP address instead of 10.1.1.254.

    If the gateway IP address cannot be pinged, check the network cable connection.

  5. Run the ping command to check whether the DNS server on the customer network properly resolves the IP address of the device.

    ping mgt.seccloud.huawei.com //Assume that the domain name used by the device to send registration requests to the security service platform is mgt.seccloud.huawei.com. Use the actual domain name of the target site during your operations.

    If the ping operation fails, run the ping IP address of the DNS server command to check whether the network communication between the device and the DNS server is normal.

  6. Run the telnet command to check whether the interface on the device for registering with the public network platform works properly.

    telnet mgt.seccloud.huawei.com 10020 Assume that the domain name used by the device to send registration requests to the security service platform is mgt.seccloud.huawei.com. Use the actual domain name of the target site during your operations.

    If the command output contains SSH certificate exchange information, the interface works properly. If the interface is faulty, check whether port access restrictions are configured on the customer's security device.