Broaden ALLOWED_CLIENTS from the console VLAN alone to also include the server VLAN (192.168.20.0/24) and the trusted management VLAN (192.168.10.0/27) so the resolver can be tested and administered from those networks. The consoles still only require the 192.168.40.0/28 range. Co-Authored-By: Claude Opus 4.8 <[email protected]>