Limiting the access to the gui

[hushcoden]

I'd want to allow only two devices within the LAN to access the OPNsense gui (and ssh too), can someone explain to me how do I do that?

Tia.

[Patrick M. Hausen]

With firewall rules?

Source: alias with your two devices
Destination: This Firewall
Destination port: alias with 22 and 443
Action: allow

Of course you need after that one either a dedicated block rule or remove the default "allow all" rule from LAN and implement rules with finer granularity for Internet access etc.

HTH,
Patrick

P.S. Also disable that global "anti-lockout" thing.

[hushcoden]

P.S. Also disable that global "anti-lockout" thing.

Is it the checkbox Disable anti-lockout in Firewall -> Settings -> Advanced ?

[Patrick M. Hausen]

Yes.