Wireless Access

last person joined: 16 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

8.3.0.0 - Cannot add system defined service to user defined role?

This thread has been viewed 6 times

  • 1.  8.3.0.0 - Cannot add system defined service to user defined role?

    Posted Aug 30, 2018 05:38 AM

    Hi


    I am using 8.3.0.0 and trying to configure user roles and policies.


    I have created a new user role and added some rules to deny traffic to a certain networks with no issues


    When I am trying to add a policy to this to allow DHCP and DNS i get 


    "System defined sergice: 'sys-svc-dhcp' cant be applied to user created session ACL

     

    Any ideas why I cannot add this or a way around it?

     

    Thanks



  • 2.  RE: 8.3.0.0 - Cannot add system defined service to user defined role?

    EMPLOYEE
    Posted Aug 30, 2018 07:01 AM

    Do you have a screenshot of exactly what you are trying to add?



  • 3.  RE: 8.3.0.0 - Cannot add system defined service to user defined role?

    Posted Aug 30, 2018 07:09 AM
      |   view attached

    Sure, here it is



  • 4.  RE: 8.3.0.0 - Cannot add system defined service to user defined role?

    Posted Oct 13, 2019 08:14 PM

    I'm having the same problem, did you solve it?



  • 5.  RE: 8.3.0.0 - Cannot add system defined service to user defined role?

    EMPLOYEE
    Posted Oct 13, 2019 10:21 PM

    There is a non-system version of every service that should be used, instead.



  • 6.  RE: 8.3.0.0 - Cannot add system defined service to user defined role?
    Best Answer

    Posted Oct 13, 2019 10:49 PM
    @cjoseph wrote:

    There is a non-system version of every service that should be used, instead.

    Was just on my way back here to report the same. It is easy to miss unless you've seen it once before, but once you've spotted this it becomes clear that there are 2 entries for most service aliases

    e.g. sys-svc-ssh and svc-ssh