Switch off access points at night?

[DHAnderson]

I have local device status pages disabled, yet when I run a NMAP scan of my LAN, my MX65 shows 8090 and 8181 open.  The service shown is HTTP.  When I try to get to those IP address in a browser I get message that mx.meraki.com is taking too long to respond.

One of my access points is showing ports 53 (domain) and 81 (http) open.

Are these ports open by design?  If not, is there a way to close them, or should I move the local IP addresses to a management LAN that is not accessible from the LAN.

- Dave

[NolanHerring]

I always recommend to have a management VLAN where your network gear (MX/MS/MR) resides, and cut that off from being accessible from say wireless etc. I also disable the local status page most of the time. Can't say for certain about the port scanning results though.

[DHAnderson]

I created a VLAN for all the network devices and blocked access from the LAN to that VLAN.

NMap is still showing open ports on the MX65.

[RobertMiranda]

Did you ever end up finding a way to close those ports?

Thanks.

Robert.