Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Remote admin of AP

Is there an option to turn of remote administration of the Cisco 1100 AP. I wish to allow only machines on the cabled network to administer the AP's, not wireless clients for security reasons.

  • Security and Network Management
2 REPLIES
New Member

Re: Remote admin of AP

Put the management interfaces of the APs on a separate VLAN from the wireless clients. then write and apply an access list on the LAN router such that wireless clients cannot reach the AP management vlan.

I find that being able to get to the aps from a wireless client greatly aids troubleshooting, tho. Maybe TACACS is a better solution.

New Member

Re: Remote admin of AP

telnet to your access point

issue the following commands

enable

access-list 10 permit host x.x.x.x

line vty 0 4

access-class 10 in

exit

ip http access-class 10

end

Just replace x.x.x.x with the ip host you want to have access, you can also specify a subnet without the host keyword but using host is more secure. TACACS or Radius is a more secure solution but requires a Radius server to authenticate to. If you have one, let me know and I can shoot you the appropriate configurations.

114
Views
0
Helpful
2
Replies