ER8411 UI webpage accessible from internet and NAT port 443 not working

ER8411 UI webpage accessible from internet and NAT port 443 not working

ER8411 UI webpage accessible from internet and NAT port 443 not working
ER8411 UI webpage accessible from internet and NAT port 443 not working
Saturday
Model: ER8411  
Hardware Version: V1
Firmware Version: v1.3.6

I have an ER8411 where the UI is accessible from the internet, without setting up a NAT or an ACL.

 

The web page shows that the ER8411 is managed by an Omada controller.

 

In Omada controller settings - services you can uncheck 2 boxes, so that the device local http and/or https is disabled.

Unfortunately that doesn't disable the ER8411 web interface both internal and external.

 

I also setup NAT for 443 to point to internal host, but the ER8411 page is shown. When I setup NAT not with port 80 or 443 it works.

 

So my questions;

How can I disable the UI on ER8411 (both internal and external)?

How can I setup NAT using port 443 to internal host?

 

Kind regards,

Erik

 

  0      
  0      
#1
Options
7 Reply
Re:ER8411 UI webpage accessible from internet and NAT port 443 not working
Saturday

  @eab69 

 

You cannot access the router's management from the internet unless you have actively opened it up. However, if you try to access the router's management port from the LAN, you will be able to access it. So try testing from the internet, not from the same LAN that the router is connected to.

 

There is also no problem with port forwarding to 80 or 443, you do it this way.

 

 

  0  
  0  
#2
Options
Re:ER8411 UI webpage accessible from internet and NAT port 443 not working
Saturday

  

Hi  @MR.S 

 

Thanks for your quick reply.


Below link I copied from my iPhone connecting to my external IP address via data of my phone,  with no vpn, no WiFi and no NAT setup on the gateway.

https://82dot64dotxdotx/webpages/login.html ,so accessible from the internet.

 

I setup the NAT exactly as decribed in your reply, I used port 443 and used internal IP 192.168.0.11.

But I only get the above page, not the internal host at 192.168.0.11

 

kind regards

Erik

 

 

  0  
  0  
#3
Options
Re:ER8411 UI webpage accessible from internet and NAT port 443 not working
Saturday

  @eab69 

 

Do you have a screenshot of the router alc wan/in?

 

  0  
  0  
#4
Options
Re:ER8411 UI webpage accessible from internet and NAT port 443 not working
Saturday

 Hi @MR.S 

 

no ACL's for gateway, switch or eap.

 

kind

Erik

  0  
  0  
#5
Options
Re:ER8411 UI webpage accessible from internet and NAT port 443 not working
Yesterday

  @eab69 

 

you must be doing something wrong when testing, everything is blocked from wan to lan if you haven't opened up any rules, port forwarding to 80 and 443 should also work without problems. so without knowing anything more about your solution it will be difficult to help any more.

the only thing I can think of is if you create acl or disable NAT, then you will be able to access the management interface via WAN

  0  
  0  
#6
Options
Re:ER8411 UI webpage accessible from internet and NAT port 443 not working
14 hours ago

@MR.S 

 

I did some more testing, ending up with the same 'problem'. UI of the gateway shown on remote device (iPhone with wifi disabled, no vpn, using data connection, cleared cache). I connected to the external IP address, then once with external domain (ddns.net) and also with a domain name I also use on the internal network (split dns).

 

Unfortunately, all with the same results, showing the UI of the ER8411.

 

NAT is disabled and have no ACL’s setup.

 

Thanks

Erik

 

 

 

  0  
  0  
#7
Options
Re:ER8411 UI webpage accessible from internet and NAT port 443 not working
12 hours ago

  @eab69 

 

If you have disabled NAT, you will have access to the management interface. When NAT is enabled, you really only have one router. You must block WAN/IN, otherwise your entire network is accessible from the internet.

 

  0  
  0  
#8
Options