I am not too savvy on the actual administration of networking devices, so I’m hoping for some advice on how to configure my network securely.
I have a gateway router which connects to a Ruckus ICX switch, which in turn has two Ruckus Unleashed APs connected to it.
Ideally, I’d like to leverage VLANs to segment the network (applying ACLs). My question is, what kind of configuration do I need to implement so that I can manage the APs from a management VLAN, but have the AP clients restricted from accessing the AP console or web UI?
Initially, I thought I’d just be able to assign the switch port to a tagged VLAN and set the AP to use that same VLAN (AP config calls this Access VLAN), but that didn’t work. I tried untagged as well, but then I can’t reach the AP from the management VLAN.
Any help or advice would be greatly appreciated!