I'm doing an inbound NAT on the upstream firewall. Since the deployment is used only for guest access there is no corporate access to the GPP. So in order to provision an account the corporate users browse to an external NAT on the firewall which translates to GPP on the Aruba. I could look at restricting the firewall policy however I was just wondering if there was another method on the Aruba.
My main concern is that we have no IP restrictions on the outside world to the management UI on the Aruba
:)