Securing a 350 AP

[k.dewsnap]

Using a 350 AP running vxworks .Is there a method of turning off http and telnet access to the management port over the radio interface but still keeping access via iether of these methods over the wired interface (lan port).

I dont want to upgrade to IOS if possible.

[melisei]

You can definitely disable both the telnet and web page from Setup/console_telnet and setup/web setver.

Have you thied filtering that access to the unit from the wireless side?

ME

[k.dewsnap]

I think that when you disable both http and telnet it disables this function on both the radio interface and the wired interface. What I want to do is enable access to the set up pages via the wired side (ethernet port) but totally disable via the radio interface.

I had a look at filtering on mac addresses but couldnt find a way of only applying the filter to the configuration port.

[gamccall]

It's trivial to restrict management access to a specific IP range, if you upgrade to IOS. I don't recall any way to do it under VxWorks.