1
00:00:07,360 --> 00:00:14,320
All right so we have created an interface using our command line the interface the management interface

2
00:00:14,350 --> 00:00:18,170
is on tend to deal with the three dot sixteen.

3
00:00:18,260 --> 00:00:23,080
Let's enter using our admin credentials with no password.

4
00:00:23,080 --> 00:00:25,630
Of course you should.

5
00:00:25,630 --> 00:00:27,290
Later on.

6
00:00:27,850 --> 00:00:28,780
Change it.

7
00:00:28,840 --> 00:00:33,930
You should define your own user name with a strong password.

8
00:00:33,940 --> 00:00:36,640
Now I'm using a real 48 device.

9
00:00:36,670 --> 00:00:45,000
So my interface boards are a bit different from the ones that I have created or configured before.

10
00:00:45,430 --> 00:00:53,700
But let's let's choose one interface and let's use it for.

11
00:00:53,690 --> 00:00:56,190
Management interface purposes

12
00:01:00,430 --> 00:01:11,440
so currently I am using port eight an alias is a good way to describe the interface purpose.

13
00:01:11,440 --> 00:01:14,910
So I'll call it admin.

14
00:01:14,970 --> 00:01:19,580
Now there are different trolls for 48 interfaces.

15
00:01:19,640 --> 00:01:28,550
They can be used as lan interfaces they can be used as one interfaces or DMC interfaces or undefined

16
00:01:29,000 --> 00:01:32,450
for our purpose we will use undefined.

17
00:01:32,450 --> 00:01:45,980
Now we can change the IP address let's decide that the IP address that we will use will be 10 the 10

18
00:01:45,980 --> 00:01:48,860
that 11 that one we are using manual.

19
00:01:48,860 --> 00:01:58,430
An interesting mode that is static IP that we configure and that is not configured by the DHS IP we

20
00:01:58,430 --> 00:02:08,960
can also use PPO e or an interface that is dedicated to 40 switch which is out of the scope of this

21
00:02:09,470 --> 00:02:15,660
course we will use 24 subnet mask.

22
00:02:18,320 --> 00:02:30,050
And that will be the interface ip address that will be used to enter our 48 on different occasions.

23
00:02:30,050 --> 00:02:36,650
Now let's move over to administrative access which are actually the protocols that are used to enter

24
00:02:37,100 --> 00:02:39,580
that IP address.

25
00:02:39,590 --> 00:02:46,430
Well we should not rely on unencrypted protocols so we should use HIPPA.

26
00:02:46,460 --> 00:02:56,300
And whenever one gets into the interface using DDP port 80 it will be redirected towards Port 443 which

27
00:02:56,300 --> 00:03:06,770
is the H DTP s secure protocol if it is an internal if you want to get into your 48 device and check

28
00:03:06,770 --> 00:03:13,760
connectivity internally you can use ping if you're using it remotely.

29
00:03:13,760 --> 00:03:26,480
Don't use ping ping is or ICMP echo messages are a risk FMG access is 40 manager access it is not needed

30
00:03:27,020 --> 00:03:29,550
for administrative purposes.

31
00:03:29,600 --> 00:03:38,330
Cap what is also not needed it is a protocol that is being used to create a tunnel between your 48 and

32
00:03:38,330 --> 00:03:47,380
your 40 AP or 40 access points 48 can act as a controller for wireless access points.

33
00:03:47,420 --> 00:03:57,380
Now we will not use the DHS IP server or the DNS server for purposes the administrative interface is

34
00:03:57,440 --> 00:04:01,830
meant solely for our purposes as admins.

35
00:04:02,060 --> 00:04:06,140
It is not used to allocate IP addresses.

36
00:04:06,290 --> 00:04:14,660
We will not use services such as DNS to resolve IP addresses.

37
00:04:14,660 --> 00:04:19,970
We do not need to use a captive portal.

38
00:04:19,970 --> 00:04:25,670
It is not meant to be used on a management interface

39
00:04:28,960 --> 00:04:39,670
we can use the FTE M which is the 40 token mobile which is a way to access our interface using a two

40
00:04:39,670 --> 00:04:47,200
factor authentication which is a topic by itself that we will look at it later on.