USG310 - Block traffic to Management but not to Internet
Hello,
I'm really struggling on this one.
I have an USG310 and NWA5123 as AP. Maybe the problem is easier than I think to solve but I just can't figure it out.
The USG is accessible under the default IP 192.168.1.1 and for the AP I set 192.168.10.1. Now I wan't to block the connection to 192.168.1.1 for the AP.
I think there is a specific firewall rule which I need to set but I didn't find them yet.
One thing I tried is block AP traffic to ZyWall but if I do this, the AP shows as offline in AP Management.
For managing the Switch I'm using LAN on a other port than the AP.
I'm really struggling on this one.
I have an USG310 and NWA5123 as AP. Maybe the problem is easier than I think to solve but I just can't figure it out.
The USG is accessible under the default IP 192.168.1.1 and for the AP I set 192.168.10.1. Now I wan't to block the connection to 192.168.1.1 for the AP.
I think there is a specific firewall rule which I need to set but I didn't find them yet.
One thing I tried is block AP traffic to ZyWall but if I do this, the AP shows as offline in AP Management.
For managing the Switch I'm using LAN on a other port than the AP.
0
Accepted Solution
-
Hi @Lukas0102
True, you need to block AP to ZyWALL but if ZyWALL manages this AP you need 2 rules:
a) Allow AP to ZyWALL with "Services: CAPWAP"
b) Block AP to ZyWALL with any services
So you can make sure your Management WIFI is working, but PING is blocked
Also, you can do:
a) Block "AP to ZyWALL" with Service "PING"
b) Allow "AP to ZyWALL" with Service "Any"
To may not run into more Port block issues.
Kind Regards,
Tobias0
All Replies
-
Hi @Lukas0102
True, you need to block AP to ZyWALL but if ZyWALL manages this AP you need 2 rules:
a) Allow AP to ZyWALL with "Services: CAPWAP"
b) Block AP to ZyWALL with any services
So you can make sure your Management WIFI is working, but PING is blocked
Also, you can do:
a) Block "AP to ZyWALL" with Service "PING"
b) Allow "AP to ZyWALL" with Service "Any"
To may not run into more Port block issues.
Kind Regards,
Tobias0 -
Zyxel_Tobias said:Hi @Lukas0102
True, you need to block AP to ZyWALL but if ZyWALL manages this AP you need 2 rules:
a) Allow AP to ZyWALL with "Services: CAPWAP"
b) Block AP to ZyWALL with any services
So you can make sure your Management WIFI is working, but PING is blocked
Also, you can do:
a) Block "AP to ZyWALL" with Service "PING"
b) Allow "AP to ZyWALL" with Service "Any"
To may not run into more Port block issues.
Kind Regards,
Tobias0
Categories
- All Categories
- 415 Beta Program
- 2.3K Nebula
- 141 Nebula Ideas
- 94 Nebula Status and Incidents
- 5.5K Security
- 216 USG FLEX H Series
- 262 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1K Wireless
- 39 Wireless Ideas
- 6.3K Consumer Product
- 243 Service & License
- 382 News and Release
- 81 Security Advisories
- 27 Education Center
- 8 [Campaign] Zyxel Network Detective
- 3K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 83 About Community
- 71 Security Highlight