Remote admin of AP

[ian_ahb]

Is there an option to turn of remote administration of the Cisco 1100 AP. I wish to allow only machines on the cabled network to administer the AP's, not wireless clients for security reasons.

[ED CARMODY]

Put the management interfaces of the APs on a separate VLAN from the wireless clients. then write and apply an access list on the LAN router such that wireless clients cannot reach the AP management vlan.

I find that being able to get to the aps from a wireless client greatly aids troubleshooting, tho. Maybe TACACS is a better solution.

[baileja]

telnet to your access point

issue the following commands

enable

access-list 10 permit host x.x.x.x

line vty 0 4

access-class 10 in

exit

ip http access-class 10

end

Just replace x.x.x.x with the ip host you want to have access, you can also specify a subnet without the host keyword but using host is more secure. TACACS or Radius is a more secure solution but requires a Radius server to authenticate to. If you have one, let me know and I can shoot you the appropriate configurations.