Apologies if this might sound as a very dumb or beginner question, but I’m having trouble allowing the follow:
Access (https) towards the map lite from the LAN port.
Scenario:
Internet > Router > vlan 2 > Map Lite (192.168.0.1) > AP DHCP (192.168.168.1/24)
Internet > Router > vlan 3 > LAN network (172.20.0.1/24)
The map lite functions as a (bridged) access point with DHCP running.
All is working (internet from wlan on the 192.168.0.1/24 subnet)
However I can only get to the management gui from the actual WLAN clients and not the LAN clients.
Routes and natting is there on the Router and debugging allows the connection correctly.
Not sure I understand well. I have many questions
You can access to your router from vlan2 but you can not access to your router from vlan3?
What is there in the LAN Network? The router has a ip address in the same network 172.20.0.0/24?
Which IP are you trying to reach from your LAN? Did you tried to ping this?
Default ether port is considered WAN on map lite and most likely your firewall will block access from WAN.
One (albeit quite raw) option is to simply add an input rule in firewall for TCP/443, no interface.
Place that rule before the input drop rule.
Then you should be able to get in from everywhere.
I can access the map lite from the WLAN dhcp addresses but not from any vlan behind the LAN connector (wan side of the map lite)
I tried the management IP I set on this ethernet port (wan side of the map lite).
Thanks for the quick resolution!
It ended up being the firewall input rule after all.
Must’ve selected something incorrectly when I tried a firewall allow policy before posting…
It works as expected now, next is to enable my ssh access instead and perhaps fine tune the firewall a bit.