Restrict the WLC access

[aleopoldie]

Hello experts, 

I have multiple SSID's mapped to multiple interfaces, and I would like to restrict the WLC access because right now, any client connected to any SSID can access the WLC through his interface.

Example : 1 client on SSID A can access the WLC on the interface A, 1 client on SSID B can access the WLC on the interface B etc...

How to avoid this ? I would like to allow the access only on the management interface.

ACLs are the only solution ?

[RichardAtkin · Accepted solution]

You can disable management via the dynamic interfaces;

config network mgmt-via-dynamic-interface {enable | disable}

You can also disable management from Clients thare are connected via the WLC's WLANs;

config network mgmt-via-wireless {enable | disable}

Or you can use ACLs;

https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/access_control_lists.html