VPN and ACL rule to block gateway management page
Evening,
I setup a VPN server (OpenVPN), which worked fine until the classical problem of an ISP changing the public IP got revealed. Since the router has support for dynamic DNS, I created a domain and configured it in the router. I also configured both an OpenVPN and WireGuard VPN to work with the new domain, and was able to connect from remote.
Since I could reach the gateway management page by typing the domain name in the browser, I setup a Deny rule:
This prevented outside access to the Gateway Management Page, but also stopped the VPN tunnels from connecting.
I therefore added a Permit rule above the Deny rule:
However, I still am not able to connect using either of the VPN solutions.
Am I missing something obvious?
@Hank21 Thanks for the reply. The Gateway Management page which I could see, should have corresponded to the routers original one. However, on the page, it was noted that the device now was controlled by the controller with IP x.x.x.x. So I couldnt change any settings even if I logged in.
However, I tested again to disable the extra DENY and PERMIT rule in the ACL mentioned in the original post. Then I disconnected the cellphone from the WiFi and tried to access my domain name again, as before. Now I was not able to reach the Gateway Management page! Not entirely sure why I this worked before. It might have been because I also removed some checkbox under Site Settings, e.g. under Services I disabled both Device Web HTTP/HTTPS Access.
