WEBVTT 00:07.360 --> 00:14.320 All right so we have created an interface using our command line the interface the management interface 00:14.350 --> 00:18.170 is on tend to deal with the three dot sixteen. 00:18.260 --> 00:23.080 Let's enter using our admin credentials with no password. 00:23.080 --> 00:25.630 Of course you should. 00:25.630 --> 00:27.290 Later on. 00:27.850 --> 00:28.780 Change it. 00:28.840 --> 00:33.930 You should define your own user name with a strong password. 00:33.940 --> 00:36.640 Now I'm using a real 48 device. 00:36.670 --> 00:45.000 So my interface boards are a bit different from the ones that I have created or configured before. 00:45.430 --> 00:53.700 But let's let's choose one interface and let's use it for. 00:53.690 --> 00:56.190 Management interface purposes 01:00.430 --> 01:11.440 so currently I am using port eight an alias is a good way to describe the interface purpose. 01:11.440 --> 01:14.910 So I'll call it admin. 01:14.970 --> 01:19.580 Now there are different trolls for 48 interfaces. 01:19.640 --> 01:28.550 They can be used as lan interfaces they can be used as one interfaces or DMC interfaces or undefined 01:29.000 --> 01:32.450 for our purpose we will use undefined. 01:32.450 --> 01:45.980 Now we can change the IP address let's decide that the IP address that we will use will be 10 the 10 01:45.980 --> 01:48.860 that 11 that one we are using manual. 01:48.860 --> 01:58.430 An interesting mode that is static IP that we configure and that is not configured by the DHS IP we 01:58.430 --> 02:08.960 can also use PPO e or an interface that is dedicated to 40 switch which is out of the scope of this 02:09.470 --> 02:15.660 course we will use 24 subnet mask. 02:18.320 --> 02:30.050 And that will be the interface ip address that will be used to enter our 48 on different occasions. 02:30.050 --> 02:36.650 Now let's move over to administrative access which are actually the protocols that are used to enter 02:37.100 --> 02:39.580 that IP address. 02:39.590 --> 02:46.430 Well we should not rely on unencrypted protocols so we should use HIPPA. 02:46.460 --> 02:56.300 And whenever one gets into the interface using DDP port 80 it will be redirected towards Port 443 which 02:56.300 --> 03:06.770 is the H DTP s secure protocol if it is an internal if you want to get into your 48 device and check 03:06.770 --> 03:13.760 connectivity internally you can use ping if you're using it remotely. 03:13.760 --> 03:26.480 Don't use ping ping is or ICMP echo messages are a risk FMG access is 40 manager access it is not needed 03:27.020 --> 03:29.550 for administrative purposes. 03:29.600 --> 03:38.330 Cap what is also not needed it is a protocol that is being used to create a tunnel between your 48 and 03:38.330 --> 03:47.380 your 40 AP or 40 access points 48 can act as a controller for wireless access points. 03:47.420 --> 03:57.380 Now we will not use the DHS IP server or the DNS server for purposes the administrative interface is 03:57.440 --> 04:01.830 meant solely for our purposes as admins. 04:02.060 --> 04:06.140 It is not used to allocate IP addresses. 04:06.290 --> 04:14.660 We will not use services such as DNS to resolve IP addresses. 04:14.660 --> 04:19.970 We do not need to use a captive portal. 04:19.970 --> 04:25.670 It is not meant to be used on a management interface 04:28.960 --> 04:39.670 we can use the FTE M which is the 40 token mobile which is a way to access our interface using a two 04:39.670 --> 04:47.200 factor authentication which is a topic by itself that we will look at it later on.