07-11-2018 10:54 AM
I'm trying to limit access to the management part of the airos radios. I've set up a management vlan, assigned the management interface with this vlan and associated an IP address with it. I can acces the mgt pages fine via the mgt IP/VLAN, but also via the existing WAN interface. I do not see that these two interfaces are bridged.
How can I disable acces to the mgr screens from the standard WAN interface and IP?
Radio is in router mode, runnning airos 8.5.4CS
07-13-2018 03:15 AM
Thanks. This works indeed.
About the LAN part - I'd like to stop clients from trying to get into the management interface. Blocking the LAN access would do this.
But there are times when the wifi part is broken and the only way to get to the radio is via the LAN interface.
So I'd like to make it more difficult, but not impossible. Any best practices here?
07-13-2018 08:50 AM
Then you would just need to add the VLAN on your laptop's LAN interface when connecting directly to the LAN port of the airMAX device.
07-13-2018 09:09 AM
Make sure to make use of the Test button when working with VLANs.
07-13-2018 09:28 AM
07-26-2018 07:11 AM
Sorry for the late response - I had to wait for a suitable test setup.
I would like to provide access to the management vlan from a number of selected stations. These are all in router mode.
So what I would like to do is untag the vlan at the wlan interface and pass it to the lan network. I tried to define a vlan with the same id of 10 on the wlan0 (brdge) interface, as well as on the lan0 interface. Neeither of them worked.
How do I go about setting this up?