Customer Access GUI in Nat Mode

Products ePMP
1

Hi, we received a lot of calls from our customers that are in NAT Mode and they can access the GUI from the LAN IP Address. Theres a way to deny GUI Access from LAN IP Address in NAT Mode ? this is a security issue that we are rally worried about. Thanks

2

Hi,

The esiest way to restrict customers access to the Web UI is to setup management VLAN. In this case any access to to the unit from LAN side will be blocked.

Best regards,

Dmitry 

3

Hi.  With some other gear we have, we can change the port of the internal web server. So that something like 192.168.0.2:8081 would be needed to access the GUI.  Of course, that's not really security, but it is at least obscurity. :)

4

Well, when the mode is in NAT vlans are not separated in the newest version, so i think the only solution is the separate wireless management ... see attachment