Services

Hope you can help .....

I have a Captive  Portal running and it has served our guests for years. I have an annoying issue though ..... how can I avoid having users on the portal net (192.168.6.1/24) to gain access to the access point (IP 192.168.6.3)  on the Portal. The AP has password authentication but anyhow  ..... 

I have the following firewall rule on the portal subnet:

                   
Block    TCP/UDP      Portal net       *      192.168.6.3      80 (HTTP)      block access point admin

any ideas ?

The answer is obvious ... the packets will not go through the firewall and it means that my rule doesn't make sense .....

Any idea how to isolate the access point ?

You could create a vlan for management only and a vlan for portal users, if your hardware supports it... Works well with my DLink AP.

Or another method could be simply set the access point ip to a addres not in the subnet, but this would kill your ability to manage the ap...

have you tried adding a statement to allow 6.1 to 6.3 and place above the the one posted here?   That should work.