Hi Frank,
What you can do is create a management access policy and disable access to the web ui (or all telnet/ssh access for that matter) on the vlans you don't want to have access.
Log into the web ui, on the left hand side, click on Security, then Mgmt Access Method. First, add a profile, give it a name, and select management method all, priority 20, action permit, all interfaces. (You want to allow all, then deny some).
Second, on the left menu, choose profile rules. A rule should have been created for you with the access profile name you just created. Then create a rule to deny the vlan you want to prohibit access. Click add, give the rule a higher priority than the allow rule (I used 10), choose the mgmt methods you're seeking to prohibit (HTTP for web ui, or all...), action deny, then choose user defined for the interface, then the vlan you don't want to have access.
Then you must go back to the access profiles page from the left menu, and select the profile you just created as the active access profile and hit apply.
I guess you could do it in the reverse order, deny all, then give your management vlan permission to the web ui, thats your call.
Let me know if thats what you're looking for.
Best,
David
Please rate helpful posts.
