OPNsense Forum

English Forums => 25.7, 25.10 Series => Topic started by: craftnix on October 17, 2025, 05:39:36 PM

Title: Deny admin login to user portal
Post by: craftnix on October 17, 2025, 05:39:36 PM
I have the Business Edition user portal working, but how do I allow user login to the portal from WAN but allow admin login only from LAN side? Is this possible? I couldn't find a place where to set management networks.

I will limit access from WAN to user portal eventually after onboarding since it can't be setup to require OTP after the initial seed generation, but as an added measure I'd like to deny any admin user login from WAN altogether.
Title: Re: Deny admin login to user portal
Post by: Monviech (Cedrik) on October 17, 2025, 05:57:03 PM
Go to

System: Access: Groups

edit the admin group

set source network

Title: Re: Deny admin login to user portal
Post by: craftnix on October 18, 2025, 09:28:18 AM
Thanks! Didn't think to look there, I guess I was assuming it would be under System:Settings:Administration.
Title: Re: Deny admin login to user portal
Post by: Monviech (Cedrik) on October 18, 2025, 09:35:28 AM
Hehe yeah some settings are in unexpected places but there you can restrict any group generically which is way better than only admins :)