Moving anti-lockout to a different LAN interface
-
Hello all,
there is a way to move anti-lockout rule from LAN1 to LAN2? My Netgate 4100 is installed on LAN2, but I don't see any possibility to move the above rule. Thank you. -
@Airone-0 said in Moving anti-lockout to a different LAN interface:
My Netgate 4100 is installed on LAN2
Go to your LAN, take a screen shot of the anti lock out rule, and then switch to LAN2, create a rule yourself, and make sure its on top ?!
-
Are you telling me that there is no possibility of moving the rule? Very strange that no one has thought of that.
Anyway, thanks. -
@Airone-0 said in Moving anti-lockout to a different LAN interface:
Very strange
Not really.
For historical reasons, routers, firewalls etc, the LAN interface is the interface used by the admin.
And maybe, but rarely, some other people / equipment.
All the other users / devices, who do not have to administer the router firewall, are attached to other LAN type interfaces.I created one myself for a LAN type interface :
The Alias Admin_access is :
because my pfSEnse uses SSH = port 22 and the GUI uses https = port 443.
-
@Airone-0 The rule is to make sure a admin doesn't lock themselves out of the firewall.. But you can for sure as @Gertjan mentioned create your own allow rules to access pfsense gui and or ssh from some other network/vlan
And then if you so desire disable that built in lock out rule on the lan interface..
