Disable LAN port remotely?

[ZDonaldson]

the only option I can find to disable a LAN port is via the local interface.

I am remote, connecting via a site-to-site tunnel which does not seem to be allowing me to access the local interface.

Is there any other method for disabling the LAN interface?

Also, there is currently not any devices on the LAN that I could use to access it.  but I want to make sure that interface is off so that no one places any devices behind it without my knowledge

[ww]

use the dashboard. 

Addressing & VLANs

[PhilipDAth · Accepted solution]

You are correct - you can only disable a LAN port on an MX port via the local status page.

You can access the local status page remotely by enabling this functionality.

https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Using_the_Cisco_M...

[ZDonaldson]

---

@PhilipDAth wrote:

You are correct - you can only disable a LAN port on an MX port via the local status page.

You can access the local status page remotely by enabling this functionality.

https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Using_the_Cisco_M...

---

Awesome, thanks!!

[ww]

the disabled option on  per port vlan configuration  does not work?

---

@PhilipDAth wrote:

You are correct - you can only disable a LAN port on an MX port via the local status page.

You can access the local status page remotely by enabling this functionality.

https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Using_the_Cisco_M...

---

[PhilipDAth]

@ww - actually you are right, that probably does work.  You don't get this option if you are using either a template or don't have vlan mode enabled.  I guess I have gotten used to disabling ports using the local status page because that works in all modes.

[ZDonaldson]

---

@PhilipDAth wrote:

@ww - actually you are right, that probably does work.  You don't get this option if you are using either a template or don't have vlan mode enabled.  I guess I have gotten used to disabling ports using the local status page because that works in all modes.

---

I'm only using a single VLAN so i don't even see that option...I only use Meraki devices at small sites that generally don't have use for multiple VLANS

[ZDonaldson]

---

@PhilipDAth wrote:

You are correct - you can only disable a LAN port on an MX port via the local status page.

You can access the local status page remotely by enabling this functionality.

https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Using_the_Cisco_M...

---

and just to clarify, the Security Appliance Services are referring to turning on access via the WAN interface, so I would need to add public IPs to that setting and in my browser type the public IP for that MX device. 

This is not a way to allow access to the LAN interface over a vpn tunnel, which would be more secure, but alas is not available.