RV325 remote management ACL

[pdebreczeni]

Hello,

I tried to configure a firewall rule to restrict access to remote management port, but I cannot find where to do this.

Firewall -> access rule does not working so I don't know .. maybe Cisco forgot this?

Best regards

Peter

[Michael Swenson]

Hello,

Yes, you should be able to add  access rules to deny access tot he remote management.

Allow - service 443 - WAN1 - source ip address - dest 192.168.1.1 ( if LAN ip of RV325)

Deny -  service 443 - WAN1 - Any - 192.168.1.1

Best Regards,

Mike

[pdebreczeni]

Hello,

I tried but it does not work, stil all public IP can reach remote port. Stil can reach it from every public IP on the internet.

Allow     HTTPS Secondary [8443]     WAN1     mypublicip ~ mypublicip     langwip ~ langwip Always     
    
    Deny     HTTPS Secondary [8443]     WAN1     Any     langwip ~ langwip     Always    

Firmware Version:

v1.1.1.19 (2014-12-01, 12:38:04)

[Eric Moyers]

Not trying to offend, but out of curiosity, what is your remote management port set to? 8443?

Eric Moyers

[pdebreczeni]

Offend? :) I always change default management port on every device, and yes it is 8443 currently.

[Eric Moyers]

Sorry, sometimes, when I ask verifying statements, it is taken that I don't believe or think the statement is wrong in some sense. Not many people think to change the management port,  just double checking.

Do you have other ACL's? could you send a snapshot showing those and the order? (Block out your IP but leaving the other info to read for security) or even better could you call in and open a case and let one of our Engineers work directly with you?

http://www.cisco.com/c/en/us/support/web/tsd-cisco-small-business-support-center-contacts.html

Eric Moyers
.:|:.:|:. CISCO | Cisco Presales Technical Support | Wireless Subject Matter Expert

Please rate helpful Posts and Let others know when your Question has been answered.

[pdebreczeni]

I have a support contract so I'am going to open a ticket.

[Eric Moyers]

Once you have a case number, please share that with me and I can look into it as well.

Eric Moyers

[pdebreczeni]

Cisco TAC response:

This would work only if you use a non-HTTPS port, e.g. 5000 and you need to explicitly uncheck the “HTTPS” option under “Firewall” -> “General”. HTTPS remote management would not allow you to configure ACL rules for this type of access. This is a product limitation and we can only provide a workaround.