Airport DHCP Server woes

Greetings to all!
I've got an Apple Airport Extreme running as a router to my (large) Office Network.
Recently, I've setup an Active Directory server, which runs with a DHCP server for configuration purposes.
What I'd like to know is if I can *disable* the Airport's DHCP Server, but keep it running as a "Router"/Firewall (if you want to call it that) to my ISP.
As it is now, if I disable DHCP serving, then the Airport also disables its NAT service, regardless of the fact that I've got my own internal DHCP server serving up addresses (with the Airport remaining as the "Router"). I know this is possible as Statically assigned addresses pointing at my AE as a router can access the internet, so its not like DHCP is absolutely required for NAT.
Is there any way to kill the AE's DHCP server, but keep it running as a NAT Gateway to my ISP?
Cheers!

No, the DHCP and NAT services are not able to be independently switched on and off. The cheapest way you could do this is to connect the modem to a separate broadband router that can have DHCP switched off and run the Airport express in the Distribute IP Addresses off mode.

Similar Messages

Non-Airport DHCP Server in Gateway mode...

Hello:
I've searched the forums, and found that what I need doesn't seem to be supported... but I'm going to bring it up again in hopes that Apple will see this need, and look into updates...
I run Mac OS X Server on my network. I would like to use the DHCP server supplied by Apple (with all the relevant bells and whistles associated with it) in Mac OS X Server... but I also want to use my shiny new Airport Extreme (N, Gig) as the internet gateway on my network.
There is no way to suppress the DHCP server on the Airport if I want to "share a public IP Address"... and as we all know... two DHCP servers on the same Layer 2 network is a bad, bad thing.
Will Apple help me use Apple's products? Please!!!
- matthewk
Message was edited by: KrawNET

I solved the problem in my network.
But it only works if the IP ends with "1" is not in use (by the server e.g.).
DHCP on my server works with IPs from 192.168.x.150 to 192.168.x.199
DHCP on the Airport Express only works with 192.168.x.200
By doing this, the router (Airport Express) gets the IP 192.168.x.1 (it always gets the "1").
In DHCP on my server I changed the router adress to 192.168.x.1
The 192.168.x.200 adress from the Airport Express DHCP I gave to my iPhone fix.
So all other clients in the net still get IPs and all other information from the server`s DHCP.
Btw. in the server`s DHCP log there where just two lines saying, that "dhcpd: host 1,00:00:00:00:00:00 ...(my iPhone)... declines IP 192.168.x.200 from server 192.168.x.1" and "dhcpd: INIT-REBOOT host 1,00:00:00:00:00:00 binding for 192.168.x.200 with another server" nothing more ans so there are no problems.

Can you use the Airport Express A1264 as an AP and a DHCP server at the same time?

Can you use the Airport Express A1264 as an Access Point and a DHCP server at the same time?
I would like to use it as a DHCP server and AP at the same time in my LAN (no internet, just local machines through a few switches). I was lead to belive this could be the case from a few networking friends that haven't been friendly enough to help me out setting it up.

I need it to act as a dLink/Cisco/Linksys/etc basic wifi router, in the fact that you can access it via wifi, and it will spit out DHCP addresses (192.168.1.xxx) to everything wired downstream of it.
I want to simultaniously provide a Wifi connection and a LAN connection at the same time
Thanks,
BRad

AirPort Express DHCP Server for distribution of IP-addresses?

Does the AirPort Express have an DHCP server that distribute local IP-addresses like other Wi-FI router does? If so, how do I set it up in the AirPort Utillity?

+Seems I cant force it to only use a specific subset of the IP address range?+
That would be up to the Netcomm router to provide the IP addresses to be used. I'm not familiar with Netcom, but a router with the type of capability I was thinking of could be configured to provide a certain range of IP addresses to a given device based on the MAC address of the device.
The additional information that you just furnished indicates that you probably have a basic featured router designed for home network use that would not have this type of capability. In that case, the AirPort Express would not be able to be configured to Distribute a Range of IP Addresses. It would have to be configured as a "bridge" on the network and receive IP addresses from the main router.
Or, the AirPort Express might be able to distribute the IP addresses that you want if you configure it to Share a public IP address. The rub here is that you will have what is known as a Double NAT on your network. You'll have two devices handling DHCP on the network when there should only really be one. It may or may not function correctly as this is not a recommended configuration.
Message was edited by: Bob Timmons

Want stream Netflix to blueray via Airport Express wifi. The blueray finds my wifi but the wireless connection failed - said, Ensure DHCP server is enabled on router and restart router. Don't think I have DHCP server. Suggestions anyone?

Want to stream Netflix to blueray player via my existing Airport Express wifi. The player finds my wifi but the wireless connection fails - says, " Ensure DHCP server is enabled on router and restart router." I don't think I have a DHCP server. Suggestions anyone?

I can't speak specifically regarding LG, but the Whole Home feature on Direct TV (record a movie on one DVR and watch it on another TV in another location) just won't work with wireless, and I have a strong fast connection at 300 Mbps. Ethernet works perfectly.
Few audio/video products will accept "n" wireless at 5 GHz. I suspect that your LG accepts a 2.4 GHz signal, which would top out at 130 Mpbs.
If you are trying to stream High Definition video, especially at 1080P, my opinion would be that it is unlikely that you will be able to do so reliably using wireless.
Perhaps another user who has figured out how to do this will post with some input.

Time Capsule/AirPort Express problem with DHCP server

Hi everyone,
I seem to be having some weird issue with my home network. I use a Time Capsule (2011) as my main router and a new AirPort Express as a wireless bridge (router set to "Extend a wireless network", the LAN port is connected to network printer). Recently, it seems that at least once or twice a week that the DHCP server on my router stops working. Computers that have static IP addresses have no problem accessing the internet or my local network, but devices that don't have static IPs are unable to join the network (over Wi-Fi or ethernet) because they are not being assigned an IP. This never happened before. I'm not sure if it has anything to do with the recent firmware update. Anybody else seem to be having this problem? I am able to get the DHCP server working again by restarting the Time Capsule or by setting the computer or device that won't connect to a static IP. Really curious why this seems to be happening…
Thanks for all the help guys

I am having the same problem with the same setup: a 2011 Time Capsule and an Airport Express. I've had my Aiport Express hooked in for about 2 years, so I know it is not the problem. The only difference I have is the DHCP will stop working on the ethernet, but still work over WiFi from the TC. Rebooting the Time Capsule fixes the DHCP issue.
I am running version 7.6.4 in the Time Capsule.

Can I use DHCP snooping and IOS DHCP server on the same switch stack

Hello,
I am shortly going to be deploying a Cisco CallManager solution for a customer whose network comprises stacks of Catalyst 3850 switches.
There is no separate core/server farm switch so the CallManager servers, voice gateways and IP phones will all plug into the same stack and be in the same VLAN (not my choice!).
For security we want to enable DHCP snooping and were planning on using the IOS DHCP server on the Catalyst switch stack.
Will this work? - when I enable DHCP snooping in networks with separate access layer switches I set the uplinks to the core as trusted links.
I am not sure whether DHCP snooping will work in this case. Do I need to set the VLAN interface on the switch as trusted, is this even possible?
Unfortunately I do not have access to a layer 3 switch to test this at the moment.
Thanks

Nope. That's the issue.
They'll sync on a third device acting as a hotspot, but the device sending a signal is not "on" the network it creates so the airport is all by itself on that network. At least that is what it looks like to me. Anyone have another take on it? Seems pretty silly that an iPad can put out a wifi signal, an Airport Express can receive a wifi signal, and yet there is no simple way to get them to communicate under this particular condition.

How do I find where my DHCP server is on my network?

I have a home network, a BT server, with an iMac, a MACBook Pro, two back-ups (Airports) and a Squeezebox (for internet radio). The problem is that the Squeezebox keeps dropping out and informing me that it cannot find the DHCP server. This did not used to be a problem, has happened failry recently, for no obvious reason. Any help is much appreciated.

start
system information
click network
click Wi-FI or ethernet depending how you get your network on the mac
scroll to the DHCP Server responses:
look under it's Server Identifier

Setting Up Time Capsule as a DHCP server in the router portion

Hello
I have converted my existing wireless router and network hard drive to a single time capsule. My old router was setup as a DHCP server and I had the IP range set to 10.0.0.1 to 10.0.0.50 and had a IMac, Windows PC and Copier connected to the EtherNet ports and my home network ran perfectly but only at 100MPS.
I bought the time capsule to eliminate the old router and network hard rive to a single unit to free up space, but I can't figure out how to set up the time capsule router as a DHCP server? Every time I try and change the router address range and tell the software to configure the time capsule, I get errors saying my DNS range is not valid and the IP range is conflicting to the Internet settings?
My old linksys router was so easy to setup, I just selected DHCP, gave it a range and the router took care of the IP address for the Internet. I consider myself a smart guy but apple has made this a little difficult.
I would also like to setup the time capsule so it show up as an external drive in my mobileme account so I can access my files when I am on the road. HELP!!!
Ron

ronbak wrote:
I have converted my existing wireless router and network hard drive to a single time capsule. My old router was setup as a DHCP server and I had the IP range set to 10.0.0.1 to 10.0.0.50 and had a IMac, Windows PC and Copier connected to the EtherNet ports and my home network ran perfectly but only at 100MPS.
I bought the time capsule to eliminate the old router and network hard rive to a single unit to free up space, but I can't figure out how to set up the time capsule router as a DHCP server? Every time I try and change the router address range and tell the software to configure the time capsule, I get errors saying my DNS range is not valid and the IP range is conflicting to the Internet settings?
In the Internet panel and Internet Connection tab of AirPort Utility, do you have "Configure IPv4" set to "Using DHCP" and "Connection Sharing" set to "Share a public IP address"?
I would also like to setup the time capsule so it show up as an external drive in my mobileme account so I can access my files when I am on the road. HELP!!!
You can set that in the Advanced panel, MobileMe tab.

Configure DHCP Server options for Internet Sharing?

Good morning, all.
I have a Sprint (Sierra 595U) AirCard internet connection, which I'm sharing over my AirPort (using OS X's built-in Internet Sharing) to several Windows clients in my office. I see that when Sharing is enabled, en1 takes on the address 10.0.2.1 by default, as well as the role of default gateway/router and DHCP server for the Windows clients.
My question is: Can I configure the IP addresses and DHCP options for Internet Sharing to another address/mask scheme?
Just like I changed my home wireless network away from the default 192.168.1.0/24 for security reasons, I'd like to do the same here.
Thanks and Regards,
BrooklynWalker

Some paranoia is good.
Yes, of course security paranoia can be cultured. like yogurt
I googled.
This might help:
http://www.aleph0.com/computing/macosx/dhcp-setup/
but from what I just read, changing away from the default net & mask might be putzy.Some other discussions for you:
http://www.macosxhints.com/article.php?story=20050331194834746
or you might see something here that helps.
Sorry not to be more specific. Hard to tell if you already googled for yourself.
I'll let someone smarter than I am take a look for you, here.

Blu-ray can't communicate with DHCP server since I upgraded to Lion

Hi gang, hope someone can help me out. I have a Sony Blu-Ray DVD BDP-N460 that I normally use to connect to the internet and watch streaming Netflix, etc. with no problems, until I upgraded to Lion. Now, for some reason, I get an error message: "Having trouble communicating with the DHCP server." I use a wired connection directly to my AirPort Extreme, and I also use a Motorola SBV5220 SURFboard Cable Modem. I haven't changed my internet servings on my Mac.
Under system settings on my Blu-Ray on-screen display, it says "Physical connection OK, Local Settings OK, Internet Connection Failed." I've tried umpteen times going through the automated setup on my Blu-Ray, where the system automatically detects settings, etc...everything I did when I first set the system up. And I've tried countless manual setting combinations. No luck. This is really weird because I had no problems in the past...the culprit seems to be Lion because this glitch happened simultaneously with my upgrade.
I am not a networking expert so any help will be greatly appreciated.
I'm running Lion 10.7.1 on an iMac 2.4 GHz Intel Core 2 Duo with 2GB 667 MHz DDR2 SDRAM.
Thanks.

Update: So here's what's happened. I figured I would ditch the Sony and get a $99 Apple TV. I still had the same connection issues.
(FYI my network is now set up like this: Motorola Cable Modem via Ethernet to Time Capsule via Ethernet to Mac. In a separate studio, Airport Extreme wirelessly connects to Time Capsule; Airport Express connects to Extreme via Ethernet cable. For this discussion, only Time Capsule applies, not Extreme as mentioned above.)
I called support, and they had me read my Time Capsule's IP Address, Subnet Mask, Router, and DNS Server numbers to them. Then, they had me manually input those numbers into my Apple TV (via my TV screen), number-for-number, EXCEPT they had me increase the last digit of the IP Address by one (for example, my Time Capsule's IP was 10.0.1.2, and they had me make my Apple TV's IP Address 10.0.1.3).
I assume these settings would work on the Sony DVD. I'm so happy with the Apple TV that I don't even want to go back and try.
Sorry, Apple, for blaming the whole thing on Lion. Not really sure why all this happened out of the blue though.
Hope this helps somebody. I'm a happy camper now. Apple TV rocks.

How to DHCP Server with NO ROUTER on Server Admin panel field?

Hi all!
I'm having a little problem.
I have two completely different networks, with different purposes, one is 10.0.10.X and the other is 192.168.10.X. My networks is like this:
Internet------Wifi Router (192.168.10.250) -----iMacs AirPoirt (192.168.10.X)
MacPro (10.0.10.100)-----iMacs Ethernet (10.0.10.X)
Great, is so simple. So I had a DHCP server (Windows blerg) on the 10.0.10.X (NOT MAC OS X SERVER) and everything works perfect, since on the Windows DHCP Server I'm not forced to fill the router/gateway and leaving it blank makes the iMacs have just one router/gateway from the 192.168.10.X lease from the Wifi Router.
Now I'm planning to migrate the DHCP Service to the Mac OS X Server (Snow Leopard Server), I fiddled a bit and found that I can't use DHCP Server on Mac OS Server leaving router field blank and if I type ANYTHING, my iMacs will NOT access the internet through 192.162.10.X since now there's two gateways (from 10.0.10.X that Server Admin panel forced me to fill and from 192.168.10.X that HAS to have one gateway and it's the correct one).
I've tried to fill with the 192.168.10.X gateway but throws a warning saying that is not on the same subnet.
I really don't want to re-route or mix the traffic for many reasons.
So I ask, is there any possible way to NOT fill or bypass or do anything to make DHCP Server service from Mac OS X Server not have a gateway/router?
The only way I'm managing to do it now is to use manually entered IPs on the iMacs, but it's 10 iMacs and I guess for some services like netboot etc I need DHCP.
Cheers,

Lets assume that before you had computers with both Ethernet and WiFi connections, they were able to access the Internet via WiFi and talk amongst themselves via Ethernet. The Ethernet addresses were not (in theory) accessible from the WiFi network and hence not accessible from the Internet. Presumably you intended this for security reasons.
If so, you were completely mistaken. Even if you turned on a Software firewall on each of these iMacs to in theory block traffic going between the two networks you still have a potentially insecure setup. This is because traffic can reach the iMacs via WiFi. Once hypothetical malicious traffic has invaded an iMac via WiFi it can take control over the computer and within that computer reach out via its Ethernet port to other Ethernet computers.
The only way to ensure complete security is not to have any link between the two networks at all. If one of the computers is linked to both then you have a potential path for attacks to travel across.
So what are you really trying to do? If you want two totally separate networks with one having absolutely no link to the outside world then this is simple and is as follows.
NETWORK1 Internet------Wifi Router (192.168.10.250) -----iMacs AirPoirt (192.168.10.X)
NETWORK2 MacPro (10.0.10.100)-----different iMacs Ethernet (10.0.10.X) with WiFi turned off
You could define the default gateway for NETWORK2 as being the DHCP server itself. No computer on NETWORK2 would be able to access the Internet and hence it would be totally secure.
If however you want all computers to be able to access the Internet then you need a link between them. Are you merely wanting to segregate WiFi traffic as it might be insecure and evesdropped on? If so then the following is a better approach
                         WiFi clients (192.168.10.x)
Internet ----- AirPort Extreme (192.168.10.250) ------ Hardware FireWall does NAT (10.0.10.1) ---- MacPro (10.0.10.100) ---- iMacs via Ethernet (10.0.10.x)
The WiFi clients would not be able to directly access your 10.0.10.x network as they are blocked by the FireWall. However if you have say a Laptop that you want ot use on WiFi but still access your server on your internal secure LAN you would do this by having the server run the VPN server component. The WiFi client would then connect via the VPN server and this would ensure all the network traffic going over the WiFi is encrypted using industry standard IPSec encryption. In this second scenario the MacPro (presumably your server) would have the FireWall as the default gateway, and the FireWall would have the Internet router as its default gateway. You could set the Firewall to forward VPN traffic to the server or use the second Ethernet port on the server to accept VPN traffic on the 192.168.10.x LAN.
This is my own setup is something like
                        AirPort
                           |
Internet router --- Public IP range --- (WAN) FireWall (LAN) --- LAN Switch --- Server Port1 for normal traffic
                                                 |(DMZ)                                    |
                                                 +----------------------------- Server Port2 for VPN

Is it possible to turn of DHCP server and still route?

I would like to use my airport extreme as a router but have another computer be the DHCP server. It looks like if I turn on routing DHCP turns on and there is no way to turn it off.
Thanks for any help.

That's pretty unfortunate. It seems like a pretty normal thing to do. So I am going to have to have a separate router just because airport extreme doesn't support this. Seems like most of the routers out there do allow this.
Thanks.

Bridging through built-in wireless to ethernet DHCP server

[originally posted here: Tiger Forums > Getting Online & Networking, where one suggestion was to try this forum]
I have a 1Gb ethernet LAN with my own DHCP, etc. servers, and an 802.11g WAP bridging to it using WPA2/AES. I've recently added two new Macs: an iMac connected to the ethernet and a MacBook connecting through its built-in wireless. This all works fine.
Since both Macs are 802.11n capable (with the addition of the $2 addon, which I've done), it occurred to me that I should be able to set up the built-in airport in the iMac as an 802.11n WAP that the MacBook could connect to as its preferred wireless network when the iMac's turned on, tripling it's connection speed to my LAN, and falling back to the 802.11g WAP when the iMac's not on.
I was able to do this pretty simply by setting up internet (LAN in my case) sharing on the iMac, and I could indeed get an 802.11n connection to it from the MacBook when the iMac was on, and fairly seamless failover to the 802.11g WAP when the iMac wasn't available.
Clearly, all the pieces are present to make my plan work, but there are two stumbling blocks:
1. I can't find a way to get the iMac to bridge directly to the ethernet, so that the central DHCP servers provide the configuration for the MacBook. I don't see an obvious way to allow DHCP, but not use the server built into the iMac (or configure it to hand out the addresses I want). It looks an awful lot like the iMac is NAT'ing the wireless to the ethernet, which is definitely not what I want.
Is there no way to configure the iMac's wireless as a passthrough (bridge) to the ethernet so it acts as a WAP (even if it only accepts one connection at a time)?
2. I have configured both Macs' wireless to connect to my WAP with WPA2/AES, and they do so just fine. When setting the iMac wireless up for internet sharing, why can't I set the same security options - it only offers me WEP, which I'm not willing to use.
I know the hardware can handle what I want, as can the BSD underpinnings of OS X (all of my LAN's servers run BSD variants), I just don't know how to configure it.
Can someone help?
Thanks.

>It looks an awful lot like the iMac is NAT'ing the wireless to the ethernet, which is definitely not what I want.
That's exactly what it does. The 'Internet Sharing' option enables NAT.
This may or may not be a problem, though - what is the MacBook missing by getting its configuration from the iMac rather than your regular DHCP server?
(by default, when you turn on internet sharing the OS starts up a DHCP server on the shared interface).
You might be able to get what you want by just turning on IP forwarding rather than the whole NATD/DHCPD package, but I'm not sure:
<pre class=command>sudo sysctl -w net.inet.ip.forwarding=1</pre>
but you'd have to try it to see.
> When setting the iMac wireless up for internet sharing, why can't I set the same security options - it only offers me WEP, which I'm not willing to use
I don't know the technical reason for it, but I seem to recall that computer-to-computer wireless networks always (and only) use WEP. I don't know if this is because WPA isn't possible or if they just haven't gotten around to adding it, but WEP is your only option.

Wired ethernet can't communicate with DHCP server

Hi all
I have a Mac Mini running Mac OS X Server. I recently changed a bunch of network settings, and since then I can't get the Mac to acquire an address from DHCP through the wired connection.
The wireless ethernet connects to the same router and acquires it's IP address, DNS, and router information through DHCP without a problem.
The wired ethernet connection is unable to communicate with the DHCP server. The router detects it, and sees it as having it's self-assigned ip address (169.254.74.247). The subnet mask is wrong (255.255.0.0 vs. 255.255.255.0) as well. Both are greyed out in network preferences when DHCP is selected. I've tried all of the obvious steps (restarting networking, rebooting everything, running the diagnostic tool, disabling wireless airport, etc.) to get it to work, with no change.
I can get it to connect with a manually assigned IP, but that's not a long term solution for my network.
I have had this issue with multiple routers. Currently I'm using a gigabit-e router - netgear WNDR3700. Other machines connect to the router just fine through wired ethernet (xbox360 and linkstation mini).
I'm new to Mac OS, but not new to networking. Any help would be appreciated.

This might be an old discussion but it was helpful to me. Well, almost. After reading this discussion, I arrived the same place that xoofoo above did. After some poking around, I was able to find the answers. (Feel free to correct me if I'm wrong, please!)
Here's what I did:
Launch "Server Admin" in Applications/Server folder
Open the list of services by clicking on the triangle next to the Server listed in the left pane.
Click on "Firewall"
Click on "Settings" tab
Click on "Editing services for" and select "192.168-net" (or if necessary, select "any".)
In the window below, go down the list and tick both "DHCP and Netboot client" and "DHCPDISCOVER". (hint, this list is sorted by ports number, go down and look for port 68).
Click "Save".
That should do the trick! Hope this is helpful to others in the future.

Airport DHCP Server woes

Similar Messages

Maybe you are looking for