Remote management from a specific fixed ip

AndreasC
AndreasC Posts: 11 image  Freshman Member
First Comment First Anniversary
edited April 2021 in Security
Can u please list the steps to allow remote management from a specific Fixed external ip.
USG60

Thanks
Andreas

All Replies

  • PeterUK
    PeterUK Posts: 4,169 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Make a address object for the given IP then add a Policy control with from WAN to ZyWALL with source being your given IP object.
  • AndreasC
    AndreasC Posts: 11 image  Freshman Member
    First Comment First Anniversary
    Thanks Peter for the reply, all good there.
    I have another question if u do not mind, is there way to lock down the admin account only to be
    accessible from the internal ethernet network 192.168.xxx.xxx  but not when i connect via wifi.

    BR
    Andreas
  • PeterUK
    PeterUK Posts: 4,169 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    In system > WWW you can lock it down to a given IP

  • AndreasC
    AndreasC Posts: 11 image  Freshman Member
    First Comment First Anniversary
    So if i want to restrict  my admin account to access all the functions only via the available Lan interfaces  I  create 2 rules -> zone: Lan1_subnet and Address: ALL and Lan2_subnet and Address: ALL  with both to have action as accept, and then  change the default rule to Zone: All , Address: ALL to deny ?
    Sorry i am double checking but i do not want to lock myself out 
    Andreas
  • PeterUK
    PeterUK Posts: 4,169 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Yes I think you get it but you can't change the default rule which is why you make a rule for deny but backup your config.

    You also need a rule for zone wan if your going to connect remotely. 

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）