Business Community > All Threads > Portal access for the guest vlan
< All Threads
 
2
Votes

Portal access for the guest vlan

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
 
2
Votes

Portal access for the guest vlan

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
Portal access for the guest vlan
Portal access for the guest vlan
2023-02-21 18:12:27 - last edited 2023-02-21 18:35:30
Model: Omada Software Controller (Linux)  
Hardware Version: V1
Firmware Version:

Team,

 

Typcailly the wifi-guest users are in a seperate vlan in which they can not access the management vlan.

However, the guest portal can only be accessed via the management vlan. surprise

 

As a result, guest users need access to the management vlan as well - which i.m.h.o. is a serious security risk! no

Even if limited with complicated ACL rules.

 

Please allow only portal access from the guest-wifi vlan (as it should be in the first place!)! enlightened

It shouldn't be that difficult since the given vlan is already marked for guest access. indecision

 

 

Cheers - Will

 

*** making it run like clockwork ***
#1
Options
2 Reply
RE:Portal access for the guest vlan
2023-03-27 19:43:06
This would be the reason I could not get guest portals to work. THis a must have
#2
Options
Re:Portal access for the guest vlan
2023-04-16 22:22:17
You could make a permit ACL to allow access from the Guest VLAN to the controller IP Port Group with only the portal port. After that deny ACL to access anything in the management VLAN from the guest VLAN. With just these 2 ACL rules you've denied everything except the portal.
Security Advisor in the Netherlands. Main interest in Omada products for CCTV networks.
#3
Options

Information

Helpful: 2

Views: 431

Replies: 2

Voters 2

voter's avatar
voter's avatar
About Us
Press
Copyright © TP-Link Systems Inc. All rights reserved.