OEAP 600 - Possible to disable local ports 1-3?

[Gary Culler]

I have a customer looking to deploy OEAP & wants to know if it possible to disable the local ports 1-3?  Reason being, they don't want the home user connecting devices & causing more support tickets to troubleshoot an Xbox or Google TV just b/c it's connected to a company provide AP/Switch.

I have read all the docs & it makes no mention of this.... I can see in 7.2 the ability to disable the local SSID but no mention of the ability to shutdown ports 1-3.... 

Also see support in 7.2 for Dual RLAN... but that still leaves 2 local ports.

Thanks,

Brandon

[Scott Fella]

Gary,

From why I know, there is no way to disable those ports. If your looking at just having the AP for wireless, you always can just use an AP with internal antennas and set that up as an OfficeExtend AP.

Sent from Cisco Technical Support iPhone App

[Gary Culler]

Thanks for the reply Scott... they liked the RLAN ports so they could connect a wired VOIP phone or the customer laptop for example (if the customer was having a wireless issue, they could still connect a wired port)

[Scott Fella]

I understand. Well, you will not be able to disable any of the ports on the AP600. You can glue an rj45 head into the unused ports:)

Sent from Cisco Technical Support iPhone App

[Gilberto Olivares, Jr. · Accepted solution]

We found a way to disable the local ports. 

The command is

config network oeap-600 local-network {enable | disable}

Here is the link to the documentation

http://www.cisco.com/en/US/docs/wireless/controller/7.2/command/reference/cli72commands.html#wp15794664

We also found a link on how to configure two ports (4 and 3) as Remote LAN ports

http://mrncciew.com/2013/03/11/oeap-with-multiple-remote-lans/

[Gary Culler]

Yeap....i should have updated the post.. We found the same info...

If you prefer the GUI, you can disable the local ports under:

Wireless --> Global Configuration --> Oeap Config Parameters --> Check the box "Disable Local Accesss"

As for the 2nd RLAN port, this can only be done via CLI...