Bridge or Nat mode with guest networks

Hi,
I have my new TC configured in NAT and DCHP mode because that is the only way that i can have the guest network working and also because I can use correctly de feature back to my mac. But i have the warning "double NAT" in my TC (I have a router from my isp which I turn off only the wireless service)? What do you suggest? Ignore de warning or is there anyway that i can put de TC in bridge mode and have guest network and back to my mac Working?
Thanks

While Double NAT is not desireable on a network, as you have discovered it is the only way for you to enable the Guest Network function and possibly other functions that you might need with your current modem/router.
Ideally, you would have a simple modem....not a modem/router.....which would allow the Time Capsule to be configured to provide DHCP and NAT services without producing the Double NAT error.
If the Double NAT is not producing any ill effects......normally Internet browsing will slow a bit and you may not be able to access some websites among other things......then there is an option in AirPort Utility to "ignore" the error and the TC will display a green light.

Similar Messages

Using an airport extreme in both bridged mode and guest network with DHCP

I currently use a third-generation airport extreme in bridge mode to connect my various Mac servers To the Internet. I'm using bridge mode on the AirPort Extreme because I have up to five static IP address (only using three now) I am currently not using the wireless network, and none of the servers are serving DHCP. I am looking at the Newer airport extreme with guest network Wi-Fi. My question is, does the new airport extreme base station support bridge- mode for any devices and host DHCP for the guest network connecting wirelessly to the base station?

The AirPort Extreme cannot be in Bridge Mode and support a Guest Network.
The AirPort must be configured to provide DHCP and NAT services if you want to enable the Guest Network function.
If you really do have a 3rd Gen AirPort Extreme, it will support the Guest Network feature if you connect the AirPort directly to a simple modem.....not a modem/router or gateway type of devices.......and configure the AirPort to provide DHCP and NAT services for the network.

Wireless only working with guest network?

I've just about gotten a new TC working, but strangely it the wireless only seems to work on the guest network. Have checked the password, and its correct, but still no joy.
I didn't think it was that big a deal, but now I'm wondering if its stopping me seeing old backups when going in to TM, as when I do it only shows me the current situation, and no backups. Which kinda makes sense, as I guess the whole idea of logging in as a guest is that you don't have access to files.
Also - when on the guest network, the TC doesn't show up in AU, presumably for the same reason.
Any ideas what's going on here, assuming the password is correct for the non guest network?
Thanks.

How about a "new" wrinkle: I can only acquire TC/Airport on the Guest Network, with both a new Mac Book Pro and recent iMac desktop. Plus, Airport Utility will not recognize any wireless device in the house (such as the TC!) Thus, I cannot access any manual settings. Advice or fixes?
Also experiencing slow or limited buffer rates while watching You Tube, etc... Colleague suggested resetting the unit (unplugging router and power and putting laptop in close proximity to TC), and, for an instant, Airport Utility did recognize TC long enough for me to manually set to another channel to avoid interference.
New TC purchased at Best Buy (had coupons!). Time Machine side works fine. Still frustrated that all is not working as it should...

Advice on set up for a mixed Airport network with guest network.

Hi,
The manuals on the Airport Extreme and Airport Networking are more technical than my knowledge base can follow. I would like advice on how to set up a new network with a mixture of wired and wireless devices and some Windows equipment as well as os x based macs. the following: dsl broadband from Talk Talk to be managed by a Draytek Vigor 120 external modem connected to an Airport Extreme. I want to connect a Nov 2009 iMac (with Mountain Lion installed), Apple TV and xbox by ethernet cable to the 3 ethernet ports on the Extreme, but also to connect wirelessly one Windows 7 laptop, one Macbook Pro (2010) (again running Mountain Lion) and various other wireless devices like an iPad 2, iPhones etcetera, with all devices being part of one network run under one SSID and able to access the internet, and the 3 computers being able to fileshare with each other. On my current Windows created network which I am abandoning for reasons I won't go into here, if more than one of the computers is switched on, I can use any one of the computers to access information in any of the shared folders on the other computers - via Finder in the case of the macs - and I need this going forward. I would also like to create a Guest network as I have a lot of people come to stay who need internet access. To further complicate things, I would also like to add in an Airport Express wirelessly onto the network and link that to a hi-fi to give me the ability to play my iTunes library (situated on my iMac at present) on the hi-fi.
I appreciate that there are similar questions but I have not really found an answer that exactly nails my situation.
Thanks in advance.

It is not really an issue of how many clients can the iMac serve, but more about the volume of traffic you are processing or data the database application needs to serve. We have a Mac hardware that is a good 6 years or more old running OSX Server and supporting 20/30 clients without any problems.
One idea you may like to consider.
Don't run the VPN on the mac, get a router or separate dedicated networking box that provides that purpose. Then it will talk the load of any networking issues and external attacks. It can also provide other networking services for you such a DHCP, firewall, DNS, internet gateway, etc. They cost less next to nothing and are easy to install.
When you need to get something faster, look for a second hand xerve - we use them all the time. They have the advantage of have fast and very reliable discs, also you can raid the disks and hot swap them for backup purposes,
Finally, moving from one machine to another is each with things like carbon copy. But you cannot have the same licence for OSX server running twice, so you will need to install normal OSX on the iMac once you have done the move.
As for can you easily move from a imac to mac pro, sure not to hard to do.

ISE with guest network

Can I use ISE to authenticate guest SSID,(only allowing Internet connection, while denying all production network access)?
If the answer is yes, please let me know how to do it.
Thanks,

Network Access for Guest Users
With the increased use of and dependency on mobile devices, such as laptops, tablets, and mobile phones, people have become accustomed to being able to access the Internet from anywhere. However, access to corporate networks requires more security than free Wi-Fi at a local coffee shop. To protect your company's network and to ensure that only authorized guests can access it, your company uses Cisco Identity Service Engine (ISE) guest services. Cisco ISE ensures that only authorized guests, such as visitors, contractors, consultants, and customers, can access the network.
Please refer: http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/sponsor_guide/b_spons_SponsorPortalUserGuide/b_spons_SponsorPortalUserGuide_chapter_01.html
Hope that hleps.

Difference between bridge and local mode with wlc 5508

Hello,
Now i have wlc5508 with few ap 11xx 12xx in local mode. All work correct. I will have to add few ap1552 in bridge mode ( i have to wait for wlc upgrade to change ap1552 to local mode). My question is that all ( local and bridge mode) will work correct together for my clients: rfid readers, laptop, computer in a,b,g,n mode ? What about roaming and other feature ?
thanks for help
Peter

If you plan on not doing MESH, then you set these 1552's in local mode and they will perform the same tasks as any other AP's in local mode. When you want to do MESH, then that is when bridge mode comes into play and you have to define your RAP's and MAP's.
Roaming, clients devices, doesn't matter if your using local or bridge. roaming depends on your device and coverage and rfid, also depends on triangulation with the coverage you have now.
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Guest network in bridged mode (or other non-DHCP mode)

Hello,
I have the (Simultaneous Dual Band II) Airport extreme.
I wanted to use it at work but creating a secure network (my printer, computers, and drives) and a guest network (no password so people can access internet).
They already have a DHCP server (in the past I have a mistake by forgetting to turn off DHCP on a router which assigned other computers IP address (upstream) which conflicted with their DHCP server and all kinds of problems ensued).
So I know that in Bridge Mode, the guest network is turned off.
What are my options? I'm afraid to take if off bridge mode because of the DHCP issue. But I really want to use the dual network mode on the Airport Extreme.
So I don't want to bring down the whole network, can i safely use something other than bridge mode? other ideas?
Thanks in advance for any feedback
(yes I have searched a lot for the issue but I'm not sure what to do)

First, you question the policies about my work place (none of your business).
Sorry for suggesting that you check the policies before you violate something that could get you fired.
But then, you "would bet" that I hooked something wrong (could have asked).
Sorry but that is certainly a higher probability than a router malfunctioning in that manner.
It may not be your intention (just as it is not mine to be ungrateful).
Not sure if you are showing that with your last post.

No internet through guest network

Have 2 new airport extremes, one is connected to FIOS modem and configured as primary router with DHCP and NAT enabled, second is downstream via ethernet connection in bridge mode. Guest network is active on both primary and downstream routers. Passwords, SSIDs are all the same, using automatic mode for channel. Main wireless network works fine but when connected to guest network there is no internet access. Have tried disabling guest network on downstream only with no success. Any ideas?

When you connect your Router to the Switch and you computers to the switch, you can give a static Ip to your computers and check if you are able to ping your router. If it still dosent work, then i think it might be the problem with the switch.

No Guest Network Option in AP Utility for my TC

Hi -
I have a TC connected via Ethernet to a Linksys Router. I wanted to eliminate the Linksys but need it to work with my Static IP, the TC could not be configured to do so. Thus I am using the TC as a wireless point and to back-up to using Time Machine.
While I am able to set up a normal secure Wireless Network, I now find that I do not have an option to set up a Guest Wireless Network which I really would like to have set up with an easy password for visitors so I do not need to provide the secure level password allowing them access to the main network. When first trying to use the TC I had the Guest Network option and set one up. But since I connected to the Linksys router, I no longer have the option.
Any suggestions as to why I no longer have the Guest Network option and if it is possible and how to create the Guest Wireless Network?
Thank you,
Marcantonio

Marcantonio724 wrote:
Thanks for your reply. My TC is a Simultaneous Dual Band II which I had set up with the Guest Network initially but that got dropped when connecting to the Linksys as I needed to configure the TC in Bridge mode. Guest Network requires the Shared IP configuration and will not work in Bridge mode, as I have learned today.
Yes, that's an unavoidable fact.
I am open to suggestions regarding TC and Static IP. Admittedly, the way I have my Linksys router configured was suggested to me, so I went with it, and it works as needed. But it may not be the ideal configuration which may be influencing the problem. I am using the DMZ Host to remotely access a database server. After doing some reading today, I am realizing that this may not be the securest route.
The catch is that I spent over 1 hour with Apple Care expert level advisers who could not get the TC ports open so I could access the server remotely. Thus I went the route of putting the Linksys back and connecting the TC as the wireless point. But I am unhappy that I have to give up the Guest Network.
I'm unclear as to why you need DMZ functionality and open ports to allow you to connect to a remote server. Normally those types of things are only needed to allow a local server to be reached from outside a LAN.

Guest Network Won't Serve IP Addresses

I have enabled the guest network feature on an AirPort Express. I have the AE in bridge mode so that any connecting devices receive their IP addresses from our Windows Server (functioning as a DHCP server). Devices have no trouble connecting and receiving IPs when they connect to the main (password-protected) network, but when a device connects to the Guest network (no password) they do not receive an IP address and generally end up "self-assigning" themselves an IP.
I am creating a roaming network of Apple AirPort Extremes and Expresses at our K-8 school. I can't find any similar situations mentioned online. Any ideas? Is there perhaps an issue between the Windows Server 2003 and the Airport?

Hi!
thanks everyone for the brainstorm.
I managed to get it working.
Airport Extreeme base station with 2,4 and 5ghz modes working,
Guest network too, and the AE is set into bridge mode!
I have another router, that does the routing and dhcp. That is a mikrotik RB450 router with 5ports.
The trick is to have AE connected with 2 wires to the main router!
The main wire goes from AE Wan port to the main router lan port, and the second wire goes from AE lan port to the routers other internal lan port. The AE is set to get external ip from my router and that chain works alright.
Now the second wire is connected to an isolated port on the router. That way we make sure we serve the whole purpose of GuestNetwork. That isolated port is also set as a master port to host VLAN port with ID=1003.
The last thing to do is to make a separate dhcp service running on the VLAN port alone. (not the phisical port).
It doesn't matter what ip range you give out by your second dhcp service, as long as it plays well in your subnet scheme. You can simply put both your main and the guest networks close like 192.168.1.0/24 and 192.168.2.0/24. The dns enries stay the same for both networks.
It should work with any router capable of VLAN and with at lease two lan ports avail.
Forget about sniffing ip ranges out of your AE device. It's useless! Along with the vlan tag 1003 any dhcp service met on the vlan path will respong to your guest request.
Good luck!

Guest network shows unsecured--why?

how can i make this secured? there is a password attached. i can connect using password. if i don't use password, then limited access (whatever that means), but it shows in available networks list as unsecured.
Solved!
Go to Solution.

Remember also that the Linksys Guest Networks are not only unsecured, they are all unencrypted. That's is why Linksys routers with Guest Networks are not recommended for businesses, only home use. All other manufacturers use encrypted Guest Networks.

E4200: guest networking and MAC filter

Hi there,
I have my e4200 setup with guest networking enabled and also MAC filtering. Somehow i was epxecting MAC filtering not to be applied to guest wireless network but it appears to be so.
Can anybody please confirm if this is the case and if there's a workaround?
Solved!
Go to Solution.

You are correct. MAC filtering is universal in the router. There is no workaround besides not using it.

ML wifi dropping fixed by no double NAT on APE, but no guest network in no NAT bridge mode.

ML wifi connections drop on Airport Extreme with dual NAT
I have a 2011 MBP, and a 2010 Airport Extreme. Ever since installing Mountain Lion, the MBP constantly drops wifi connection to the Airport Extreme. It doesn't drop wifi connection at the coffee shop.
Fixed by bridge mode
So I started the AirPort Utility. It informed me the AirPort Extreme (APE) has dual NAT, because the cable modem has NAT, and to change the APE to bridge mode. I did that. It fixed it! No dropped wifi. However, a few hours later, my neighbors came and told me the guest network is gone! So it fixed it for me, but broke my neighbor's connection. So I switched the APE back to NAT. Now my neighbor has wifi but my ML wifi connection is now dropping all the time.
No guest network in bridge mode
The APE doesn't have a guest network in bridge mode: http://www.dslreports.com/forum/r25840392-airport-extreme-bridge-mode-guest-conn ect

Linc, I agree it shouldn't work in bridge mode. I don't like that the Cable ISP is using NAT, but it is. All of these devices attached to my Airport Express are working.
From Aiport Utility:
     10.53.64.1     Internet router address
     10.53.73.8        Airport Express
From System Preferences, Screen Sharing:
     10.53.65.66     MacBook Pro
     10.53.65.65     MacMini (ethernet connected)
                           Neighbor's Playstation (ethernet connected)
                           Neigbhors Windows laptop (wifi connected)
From iPod Touch (http://techtips.salon.com/ipod-touch-ip-address-4209.html):
     10.53.65.153   iPod Touch 4th gen
     10.53.65.67     iPod Touch 3rd gen
Traceroute (both with and without the AE) shows the first two hops identical private IP addresses. So the AE is definitely in bridge mode, not routing. The ISP is giving me a private IP address.
Traceroute with Airport Extreme
traceroute www.apple.com
traceroute to e3191.c.akamaiedge.net (96.16.21.15), 64 hops max, 52 byte packets
1 10.53.0.1 (10.53.0.1) 8.123 ms 7.218 ms 8.513 ms
2 10.0.52.62 (10.0.52.62) 7.651 ms 8.257 ms 7.388 ms
3 static.customer-201-116-nnn-nnn.uninet-ide.com.mx (201.116.nnn.nnn) 13.757 ms 8.553 ms 10.440 ms
4 inet-bcs-snjosecabo-11-s4-2-0.uninet.net.mx (187.130.146.154) 15.486 ms 10.052 ms 10.098 ms
5 bb-la-grand-4-pos0-4-2-0.uninet.net.mx (201.125.19.38) 42.289 ms 42.592 ms 42.945 ms
6 12.89.4.5 (12.89.4.5) 43.300 ms 41.532 ms 42.443 ms
^C
Traceroute from computer plugged directly into Cable Modem. with wifi turned off
traceroute www.apple.com
traceroute to e3191.c.akamaiedge.net (96.16.21.15), 64 hops max, 52 byte packets
1 10.53.0.1 (10.53.0.1) 6.881 ms 7.050 ms 7.557 ms
2 static.customer-201-116-nnn-nnn.uninet-ide.com.mx (201.116.nnn.nnn) 9.341 ms
    10.0.52.62 (10.0.52.62) 7.090 ms
    static.customer-201-116-nnn-nnn.uninet-ide.com.mx (201.116.nnn.nnn) 9.106 ms
From the Cisco thread:
"3. Apr 10, 2010 2:43 AM (in response to chemilio)
Re: Traceroute output: What is the first hop ip?
It may depend on how the ISP do their network infrastructure. I've seen internal IP addresses in the first few hops of a Cable ISP but I can't remember whether was it the 1st hop or 2nd hop onwards.
9. May 17, 2011 1:33 PM (in response to chemilio)
Re: Traceroute output: What is the first hop ip?
Most ISPs use private RFC1918 IP address schemes for their private network. They effectively treat your street as a LAN, then perform NAT/PAT on your behalf at their CO. This means they can translate onto the public IPv4 or IPv6 internet and take a lot more control over the traffic generated by your network/PC"
https://learningnetwork.cisco.com/thread/12254
http://en.wikipedia.org/wiki/Private_network

HT3477 I am attempting to set up a guest network. When I change the Network settings to DHCP NAT I get a message that tells me that the service has a private IP address and so I must connect using off bridge mode. In this mode I can not connect to the int

I am attempting to set up a guest network on the Airport Extreme Base Station. The Base Station is connected to a DSL Modem. The network is also extended using an Airport Express. When I have attempted to set up the Base Station using DHCP NAT in the netword feature I get a message that because the service has a private IP address the only way that I can connect is in Off Bridge Mode. In this mode I do not seem to be able to connect to the internet using the guest network. Any suggestions would be helpful.

Ok, your Speedport is actually a combination DSL modem and wireless router. In this case you would typically configure a downstream router, like your AirPort Extreme in Bridge mode. Unfortunately, when in Bridge mode, the AirPort does NOT support providing a guest network.
The only possible option is to reconfigure the Speedport as a bridge and use the Extreme as your Internet router. You would still need the DSL modem provided by the Speedport for Internet connectivity.

Guest Networking with Time Capsule - bridge mode?

Hi, hopefully someone can help.
I'm trying to set up guest networking with my time capsule but it's currently set up in bridge mode so it wont let me.
When I try it in public IP address mode it says 'The DHCP range you have entered conflicts with the WAN IP address of your Airport wireless device'
I'm completely new to networking and have no idea what most of these terms mean, despite googling them all!
Can anyone advise on what I need to do to get it all set up?
Thanks in advance, any help much appreciated!!
Andy

Is there no way I could switch off part of the router so it just becomes a modem (or are they completely different things)?
It might be possible to convert the gateway to function as a simple bridge only modem, but that would involve checking with the support folks for the device. I doubt that your service provider will provide any assistance with this, because they will likely claim that this type of configuration is not supported.
So, look to see who actually manufactured the device and check with their online forum or support site to see if the conversion to a simple bridge only modem is possible.
You don't indicate whether you have cable of DSL service, and that will of course affect things as well. If you need to go to a simple modem, the best choice is always a device offered by your service provider, so that you will be supported in the event of Internet connection difficulties.
If you try an off-the-shelf modem and have any problems, your service provider will offer little or no support. Often, you can get a free modem from your provider in return for a commitment of a year's service. Might be worth checking that out.

Bridge or Nat mode with guest networks

Similar Messages

Maybe you are looking for