sys-cmd management-access

sys-cmd management-access is the command that, in WEB-CLI, checks the management access service that serves the connections coming to the TR7 management interface over HTTP and HTTPS. It has two subcommands: status shows whether the service is running, and restart restarts the service. The addresses and ports on which the service listens, the permitted networks and the HTTPS certificate come from the Management Access settings.

Command Summary

TR7 WEB-CLI · sys-cmd management-access

# type management-access and press Tab

admin@TR7LBWAF01> sys-cmd management-access

restart  status

 

admin@TR7LBWAF01> sys-cmd management-access status

admin@TR7LBWAF01> sys-cmd management-access restart

admin@TR7LBWAF01>  

Neither of the two subcommands has a field or parameter; if something is written after the subcommand, it gives a Command not found error.

sys-cmd management-access status

It writes the status summary of the service: the Active: line that shows whether it is running, since when it has been running, and the last log lines of the service. It does not ask for confirmation and does not change anything.

TR7 WEB-CLI · management-access status

admin@TR7LBWAF01> sys-cmd management-access status

# only the status line

admin@TR7LBWAF01> sys-cmd management-access status | grep Active

admin@TR7LBWAF01>  

The Active: line	Meaning
active (running)	The service is running
activating	The service is starting
inactive (dead) · failed	The service is not running; the management interface cannot be reached from a browser

sys-cmd management-access restart

It restarts the management access service. First the confirmation screen opens; when evet is written in the Turkish interface and yes in the English interface, the service is restarted.

TR7 WEB-CLI · management-access restart

admin@TR7LBWAF01> sys-cmd management-access restart

⚠  You are about to restart the management access service

    This will briefly interrupt management interface access; open management sessions (including this one) will reconnect.

 

Type "yes" to confirm: yes

Management access service restarted.

admin@TR7LBWAF01>  

Subject	Behavior
Interruption	Access to the management interface is cut for a short time; the open management sessions, including the WEB-CLI session that runs this command, reconnect. The load balancing and WAF traffic does not pass through this service.
The result message	If it completes without the session dropping, Management access service restarted. is written. This message is written without looking at the exit status of the operation; afterwards it is verified with status that the service is active (running).
Giving up	If anything other than the confirmation word is written, the Invalid confirmation. Operation cancelled. message appears; Esc closes the confirmation screen.

How It Works

Subject	Behavior
Context	It is not affected by the selected v-device and route table; it always manages the service on the device itself.
Recording	Every run is written to the user logs.

Things to Know

• When is it restarted? If there is a problem accessing the management interface, the state of the service is first seen with status; if the service is not running or appears stuck, restart is applied.
• The session may drop. If the WEB-CLI connection is cut during the restart, the result message may not be seen; after the page is refreshed, the result is checked with status.
• The access settings (the address, the port, the permitted networks, the TLS versions) are changed not with this command but from the Management Access page or with the settings access command.