I have an ER8411 where the UI is accessible from the internet, without setting up a NAT or an ACL.

The web page shows that the ER8411 is managed by an Omada controller.

In Omada controller settings - services you can uncheck 2 boxes, so that the device local http and/or https is disabled.

Unfortunately that doesn't disable the ER8411 web interface both internal and external.

I also setup NAT for 443 to point to internal host, but the ER8411 page is shown. When I setup NAT not with port 80 or 443 it works.

So my questions;

How can I disable the UI on ER8411 (both internal and external)?

How can I setup NAT using port 443 to internal host?

Kind regards,

Erik