All right so we have created an interface using our command line the interface the management interface
is on tend to deal with the three dot sixteen.
Let's enter using our admin credentials with no password.
Of course you should.
Later on.
Change it.
You should define your own user name with a strong password.
Now I'm using a real 48 device.
So my interface boards are a bit different from the ones that I have created or configured before.
But let's let's choose one interface and let's use it for.
Management interface purposes
so currently I am using port eight an alias is a good way to describe the interface purpose.
So I'll call it admin.
Now there are different trolls for 48 interfaces.
They can be used as lan interfaces they can be used as one interfaces or DMC interfaces or undefined
for our purpose we will use undefined.
Now we can change the IP address let's decide that the IP address that we will use will be 10 the 10
that 11 that one we are using manual.
An interesting mode that is static IP that we configure and that is not configured by the DHS IP we
can also use PPO e or an interface that is dedicated to 40 switch which is out of the scope of this
course we will use 24 subnet mask.
And that will be the interface ip address that will be used to enter our 48 on different occasions.
Now let's move over to administrative access which are actually the protocols that are used to enter
that IP address.
Well we should not rely on unencrypted protocols so we should use HIPPA.
And whenever one gets into the interface using DDP port 80 it will be redirected towards Port 443 which
is the H DTP s secure protocol if it is an internal if you want to get into your 48 device and check
connectivity internally you can use ping if you're using it remotely.
Don't use ping ping is or ICMP echo messages are a risk FMG access is 40 manager access it is not needed
for administrative purposes.
Cap what is also not needed it is a protocol that is being used to create a tunnel between your 48 and
your 40 AP or 40 access points 48 can act as a controller for wireless access points.
Now we will not use the DHS IP server or the DNS server for purposes the administrative interface is
meant solely for our purposes as admins.
It is not used to allocate IP addresses.
We will not use services such as DNS to resolve IP addresses.
We do not need to use a captive portal.
It is not meant to be used on a management interface
we can use the FTE M which is the 40 token mobile which is a way to access our interface using a two
factor authentication which is a topic by itself that we will look at it later on.