topic Re: Restrict the WLC access in Wireless

Restrict the WLC access

aleopoldie — Mon, 05 Jul 2021 14:41:26 GMT

Hello experts,

I have multiple SSID's mapped to multiple interfaces, and I would like to restrict the WLC access because right now, any client connected to any SSID can access the WLC through his interface.

Example : 1 client on SSID A can access the WLC on the interface A, 1 client on SSID B can access the WLC on the interface B etc...

How to avoid this ? I would like to allow the access only on the management interface.

ACLs are the only solution ?

Re: Restrict the WLC access

RichardAtkin — Mon, 25 Sep 2017 13:23:45 GMT

You can disable management via the dynamic interfaces;

config network mgmt-via-dynamic-interface {enable | disable}

You can also disable management from Clients thare are connected via the WLC's WLANs;

config network mgmt-via-wireless {enable | disable}

Or you can use ACLs;

https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/access_control_lists.html