Block Switch Login Page need to do on 2 Networks?
This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Hi,
i did block the Switch IP 192.168.0.2 (Login Page) for Users
but now i see the Login Page is also reachable from another IP 192.168.30.22.
The given IP address is not listed in OMADA UI you can check with ip scanner
Omada create for all VLAN's separate IP for the switches.
Is this necessary for internal use?
Switches will only have IP addresses on the management VLAN, and any other vlan you have defined a virtual interface for
Top arrow is my management interface (natural switch IP as shown in device list)
Second arrow is virtual interfaces I have enabled which also give them an IP in that vlan
you dont need to enable any vlan interfaces if you are not using the switch as either gateway or DHCP server for that vlan.
As to the second part of your question, if you want to block switch GUI access, even the screen that says "this switch is managed by omada", you need to create an IP-Port Group
Add the IPs of the switch interfaces
Add the ports 80,443
Then create a switch ACL blocking either networks, or an IP group you specify to that IP-port-group, TCP protocol only
****** DO NOT BLOCK YOUR MANAGEMENT VLAN TO THE SWITCH GUI ******
Switches will only have IP addresses on the management VLAN, and any other vlan you have defined a virtual interface for
Top arrow is my management interface (natural switch IP as shown in device list)
Second arrow is virtual interfaces I have enabled which also give them an IP in that vlan
you dont need to enable any vlan interfaces if you are not using the switch as either gateway or DHCP server for that vlan.
As to the second part of your question, if you want to block switch GUI access, even the screen that says "this switch is managed by omada", you need to create an IP-Port Group
Add the IPs of the switch interfaces
Add the ports 80,443
Then create a switch ACL blocking either networks, or an IP group you specify to that IP-port-group, TCP protocol only
****** DO NOT BLOCK YOUR MANAGEMENT VLAN TO THE SWITCH GUI ******