BRIDGE vs ROUTER

How can i configure Airport Extreme as a bridge instead of a router ? Is there any technical documentation that help me with this issue ?
thank you,
Paulo

In that case what will be the Ethernet and wireless IP addressing ?
The IP addressing for both would have to come from the router upstream of the AirPort Extreme.
Again is there any technical doc from Apple regard airport extreme ?
Not that I'm aware of. Apple Support provides Specifications for the Extreme. In addition, they also provide the following document: Designing AirPort Networks Using AirPort Utility

Similar Messages

ACE bridge and routed interface in the same context

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:Standardowy;
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
Hello
I am wondering if it is possible to configure one ACE context to support both routed and bridge interface?
I would like to have a bridge-mode context but in the same time I would like to have a separated OOB interface for management.
If it is possible how they could interact to each other?
Thank you in advance for any answer
Regards
Lukasz

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:Standardowy;
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
Hello
We've just tried to configure bridged and routed interfaces at the same time in the lab and we've had a problem.
When we added the def gw for the bridged config we noticed that we had an issue with the traffic src by the rservers in the routed config.
When we deleted the new def gw, the problem disappeared.
I am attaching the lab config.
When we added to it the following line
ip route 0.0.0.0 0.0.0.0 10.1.1.163
reals B1-B10 could not communicate to the outside world.
Do you know why it does not worked and what could we do to fix it ?
Thank you in advance.
Regards
Lukas

CSM bridge vs router mode

Hi,
Can the CSM be used in both the bridge and router mode for different VLANS ? Or does it need to use all router mode and all bridged mode ?

you can have a mix of both.
Gilles.

AP 1300 Bridge mode routing!!!!!!!!!!!!!!!

Hi there,
I have two 1300 AP's one configured as a bridge mode other as a non root bridge. Right now i configured for one subnet and it works. Now i have to add one more subnet in my network, for that do i have to configure SSID?
My topology is kind of this way
ASA 5505>>>Switch 2950>>>>AP1300>>>>AP1300>>>>>>>Switch2950. With Subnet 1 this senario works fine.
If add one more subnet than i know what i need to do on ASA and Switch. But i need to know how can i configure AP so it can route the traffic for
both the subnet.
Thanks,
Abhishek

Hi,
On ASA I created two VLAN 1 and VLAN 5
On Switch Create VLAN 1 as a managment VLAN 1
On AP 1300 Create SSID test assign under VLAN 1
Now the question is as you are using VLAN 5 as your managment VLAN on AP can i use my native VLAN 1 as my managment VLAN on AP???
ANS - Even on my config, the management VLAN is 1, i have used VLAN 5 to get the associations between the bridges..
We just need One SSID to be configured between the Bridges to get associated and pass the traffic..(Let it be on Either VLAN 5 or 1 it doesnt matter till we have the sub interface configs right)
One more question is i just need to configure dotradio subinterface and Fastethernet subinterface on AP and trunking ???
ANS - Yes.. Make sure you specify the native VLAN in the sub interface config..
For example..
if you already have the VLAN 1 configured between the bridges and if you need VLAN 5 traffic to be passed now, then here is the config example..
en
conf t
int bvi 1
ip address < MASK>
no shut
end
en
conf t
dot11 ssid
vlan 1
auth open
guest-mode
end
en
conf t
int dot11 0.1
encap dot1q 1 native
bridge-group 1
end
en
conf t
int dot11 0.5
encap dot1q 5
bridge-group 5
end
en
conf t
int fa 0.1
encap dot1q 1 native
bridge-group 1
end
en
conf t
int dot11 0.5
encap dot1q 5 native
bridge-group 5
end
en
conf t
int fa 0.5
encap dot1q 5
bridge-group 5
end
en
conf t
bridge i protocol ieee
bridge 1 route ip
brodge irb
On the switch
============
en
conf t
int fa X/X
switchport
switchport trunk encap dot1Q
switchport mode trunk
switchport trunk native vlan 1
end
This will do it for you!!
Lemme know if this answered ur question and please dont forget to rate the usefull posts!!
Regards
Surendra

Bridge or Router Mode?

I have adsl modem asus dsl13 (mode adsl2+ ). Provider has a PPoE.
What a proper option for TC - bridge or router?

You can do either bridge on the modem and router on the TC.. or router on the asus modem and bridge on the TC.
There is hardly any difference in overall performance.. since adsl is the limiting factor here.
But a few things to consider.
Pro router in the TC
1. The TC is a much faster router than the asus, if you need speed. (For normal setup makes no difference)
2. The TC often behaves better when it is the router to clients running time machine. (TC should be main router in the network if you keep having issues and losing connection with it).
Pro router in the Asus.
1. The TC is peculiarly apple, and misses out some things important. eg QoS, very important if you are running voip phones, upnp, very important if you run gaming consoles.
2. If you run the Asus as the main router you have direct access to the modem stats. This is difficult behind a bridged modem.
3. You can run PPPoA, which is slightly more efficient encapsulation method if your ISP supports it. For many people the ISP does not support pppoe so they have little choice. Sometimes PPPoA is the preferred method by the ISP and is just more reliable.
For the vast majority of people there is no right answer. Pick what works for you.

CSM concurrent bridge and router mode

Hi,
Is it possible on the CSM to use bridge and router mode at the same time ? Or is it only router mode or only bridge mode ?
E.g. in the example below, when using HTTPS entering the vlan 3 , it will be bridged to vlan 3....But when using HTTP entering vlan 3...it will be routed to vlan 4... Will that work ?
Thanks
vlan 3 client
ip address 3.3.3.1 255.255.255.0
vlan 3 server
ip address 3.3.3.1 255.255.255.0
vlan 4 server
ip address 4.4.4.1 255.255.255.0
vserver HTTPS
vlan 3
virtual 3.3.3.10 tcp https
serverfarm HTTPS
serverfarm HTTPS
no nat server
no nat client
real 3.3.3.11
inservice
real 3.3.3.12
inservice
vserver HTTP
vlan 3
virtual 3.3.3.11 tcp http
serverfarm HTTP
serverfarm HTTP
nat server
no nat client
real 4.4.4.10
inservice
real 4.4.4.11
inservice

HI Michel,
first of all you can run bridged and routed mode at the same time but you can not define the same vlan as client and server. If you would change the above config from vlan 3 server to vlan 30 server and place the reals in vlan 30 it will work. A proper layer 2 configuration is for sure the prerequisit.
Kind regards,
Joerg

CSS - Bridged vs Routed

I'm at the design stage and have a choice of going either way for the solution. Has anyone got any critical reasons why 1 method should be chosen over the other - Bridged vs Routed?
I haven't found any specific things that won't work in each scenario, so just looking for some pointers. Thanks.

Since the CSS needs to be in the path between the client host and the service host, you have to take care to ensure that all the service hosts will always be "behind" the CSS when you run it as a bridge.
I got bitten by this charateristic (CSS is not a proxy) when my network changed from:
WAN-Firewall-CSS-Services
to
WAN-Firewall-CSS-Services
_______|_________________
______TEST---Services
And the client expected me to balance the services hosted in the test network. Fortunately we use SSL and the Sonicwall SSL accelerators we have ARE proxies, so I was still able to make it work, since the SSL accelerators are directly connected to the CSS and the two flows are Customers-SSL and SSL-Services and the CSS is in the middle of each flow.
If all you've got "behind" the CSS are services that the CSS balances - then using the CSS as a router makes some sense. If you've got lots of networks behind the CSS and only a few of them have services on them, using it as a bridge and letting a router do the routing may make more sense.
Best wishes,
Tim

Airport Extreme 6th Gens having trouble (one bridge, one router)

I have two brand new Airport Extremes that I'm trying to troubleshoot. The problem that I'm seeing is that occasionally one (or both) will stop functioning entirely on a weekly basis.
Details on our setup:
These are servicing a small business, generally about 40-70 devices are connected between the two. They are located apart from one another to maximize the reach of our wireless network.
One is set up as a router (DHCP and NAT), it is connected to a switch which is connected to a Time Warner modem that is serviced by our building's IT contractors (I do not have access to those devices as a result). This has led to us receiving warnings about a double NAT, which hasn't been a real problem for us but could a potential point of where these are breaking so I figured I'd mention it.
The other is set up as a bridge and extends the wireless network, so they are both broadcasting the same SSID. This was set up automatically upon installation of the device.
I'm only utilizing two of the router's ethernet ports: one goes to a switch that handles our non-wireless boxes. This issue has happened regardless of the switch's presence, though, as previously we just used the ethernet ports on the Extremes and had the same problem; the other goes to the bridge.
I'm curious as to what in the configuration may be causing this problem, because I'm not totally certain if it is the fault of the Extremes and possibly due to us using our own range of IP addresses with the . Usually it is the bridge that dies and it's a PITA to get working again - I usually have to power cycle both the bridge and the router to get the bridge to function again.
Thanks for any tips you can provide.

double nat means you have 2 routers trying to, well route, basically so i suspect that tw modem is really a tw modem/router. if not, think about it, if it is just a modem, what is doing the routing before the switch?
in a clean setup, it would look like this
tw box connected to 1st extreme via eth (tw LAN port to ext WAN port, extreme in bridge mode)
1st extreme to 2nd extreme via eth (again, 1st ext LAN port going into 2nd ext WAN port, extending via a wired connection)
this is simplified. you can elongate the connections with your switch and wall jacks but the connections should be the same

ISE iPEP + 3rd party device VPN bridge or route mode

Dear All,
I would like to get some advice from the community regarding my idea.
We would like to integrate ISE iPEP with a 3rd party VPN device using bridge mode.
However i can only find documents describing the following scenarios,
- routed mode with VPN device
- bridge mode with Wireless Controller
So the questions is that is bridge mode supported if i would like to integrate ISE iPEP with a 3rd party VPN device or is it even possible to achive this kind of deployment?
Thank you in advance.
Best Regards,
Erik Molnar

Thanks for the reply Marcin. Both of your suggestions are good ones, however in this scenario both DC firewalls are alive at the same time, so there needs to be some kind of logic on the device at the remote site to say that it should only use tunnel B if tunnel A is down.
Thinking on this, is it possible to run an 'interface' or 'routed' mode IPSEC VPN with the ASA? I know this is possible with the Fortigates and think it's the default mode for Junipers. If that were possible we might be able to have both tunnels up and have OSPF run over them which would be another way to solve this problem.

Combination bridged mode routed mode CSM

We run an active/standby pair of
CSM with SSL WS-X6066-SLB-S-K9
currently we have our real servers in 2 vlans: 116 and 117. our VIPS are mostly in the client vlan 119. load balancing works fine.
We now want to load balance between real servers in the 116 vlan. So far we have been unsuccessfull to get it owrking. I suspect because we essentially require a configuration that combines routed with bridged mode.
has any one been able to configure such a setup? Is it possible at all?

This type of topology is not 'bridged mode'.
When you has source and destination of load-balancing process in the same subnet (in your topology vlan116) you need use source NAT (client nat in CSM terminology).
Let me explain it:
1. client (srcIP-vlan116) sedn request to VIP (VIP-vlan116).
2. CSM process (modified) request and send it to dstIP-vlan116 (src IP is srcIP-vlan116) (*)
3. server receive request. It will resopnse to srcIP-vlan116 and response is not delivered through CSM, but direct. TCP communication is not possible, because client's request is modified on the CSM.
* when CSM modify source IP for example to one of IP addresses of CSM, response from server is send always to CSM and not direct.
Martin

CSS: Bridge Mode + Router mode

Hi,
I have a CSS with many interfaces, all of them bridging.
I need to include one routed interface. however, front end vlan is defined bridging, the new bac kend interface is to be routed with front end.
mix og bridge mod and route mode, will it work
mix of front end defined bridged, back end defined routed, will this work
Please advice
Regards
SS

This forum is dedicated for Cisco MARS (Security product) dicussion.
Please ask your CSS-related queries here:
http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Data%20Center&topic=Application%20Networking&CommCmd=MB%3Fcmd%3Ddisplay_messages%26mode%3Dnew%26location%3D.ee7814f
Regards
Farrukh

Bridged gateway & router behind both show DNS requests

May be nothing to this, as I found nothing on this exact issue, after searching web & some network tech forums.
I've got an AT&T gateway that I connected wired WRT54GL behind it & put the Linksys in "DMZplus" mode, in the gatway's FW. There's no true bridge mode on these gateways (same on 2 models - a 2Wire 3600HGV & Pace 3051NV).
After putting a device (router) in DMZ mode, following commonly found instructions for disabling features in the AT&T gatway FW, it's supposed to "let everything connected to the DMZ device "pass through" the gatway's router / FW.
BUT... after doing this, when run DNS Benchmark tool (GRC's), results show both Linksys DNS resolver addresses & the gatway (192.168.1.254 "homeportal Local Network Nameserver") are "doing DNS queries." Both are shown in benchmark results as (actively) BEING used by the "system," indicated by "a solid green dot by nameserver entries," beside both the router's & gateway's DNS resolver addresses, in benchmark results (per GRC help docs for benchmark tool).
Even when I switched to putting DNS addresses in Vista, under the connection's IPv4 setup, re ran benchmark, still shows the DMZ'd gateway's address as "System" nameserver, & shows benchmark results for it (192.168.1.254 "homeportal Local Network Nameserver") AND for DNS resolvers entered in the Linksys.
What to make of this? How to see if BOTH the router (or Windows) AND the DMZ'd gateway are ACTUALLY doing DNS queries? Thanks.

May be nothing to this, as I found nothing on this exact issue, after searching web & some network tech forums.
I've got an AT&T gateway that I connected wired WRT54GL behind it & put the Linksys in "DMZplus" mode, in the gatway's FW. There's no true bridge mode on these gateways (same on 2 models - a 2Wire 3600HGV & Pace 3051NV).
After putting a device (router) in DMZ mode, following commonly found instructions for disabling features in the AT&T gatway FW, it's supposed to "let everything connected to the DMZ device "pass through" the gatway's router / FW.
BUT... after doing this, when run DNS Benchmark tool (GRC's), results show both Linksys DNS resolver addresses & the gatway (192.168.1.254 "homeportal Local Network Nameserver") are "doing DNS queries." Both are shown in benchmark results as (actively) BEING used by the "system," indicated by "a solid green dot by nameserver entries," beside both the router's & gateway's DNS resolver addresses, in benchmark results (per GRC help docs for benchmark tool).
Even when I switched to putting DNS addresses in Vista, under the connection's IPv4 setup, re ran benchmark, still shows the DMZ'd gateway's address as "System" nameserver, & shows benchmark results for it (192.168.1.254 "homeportal Local Network Nameserver") AND for DNS resolvers entered in the Linksys.
What to make of this? How to see if BOTH the router (or Windows) AND the DMZ'd gateway are ACTUALLY doing DNS queries? Thanks.

CSM - Bridged Mode - Routed Mode Question

Customer's request involves setting up a backup (failover) BCR server to receive hand held device scan events.
The following needs to be performed:
- Build new server up as identical to AAEPRDBCR01 (named AAEPRDBCR02).
- Application to be installed onto the new server (configured identically to AAEPRDBCR01)
- Configure customer's CSM to parse requests to AAEPRDBCR01, and failover to AAEPRDBCR02. i.e. when BCR01 is unplugged the CSM should realise and begin parsing requests through BCR02. If BCR01 comes online again, the requests should once again fall back to BCR01.
I was thinking that the two servers would reside on eg.....VLAN 13 'BiscomBCR' and Users access these servers.
Does it need to be routed or can we do the same config in Bridged mode, where the servers have the same IP addressing?
Any pointers to any useful links is much appreciated.

You can do this in bridged mode. You can basically create a backup serverfarm which contains your new server. (CR02). It will only be used if the normal serverfarm containing your existing server (CR01) is unavailable.
Attached is a link to the CSM config doc - have a look at the config examples for the backup server farm. (Make sure you read the caveats about stickiness to understand what happens when the primary serverfarm comes back on line).
http://www.cisco.com/en/US/products/hw/switches/ps708/module_installation_and_configuration_guides_book09186a0080470b20.html
Hope this helps

WRT54GL making wireless bridge to router with internet

i have a wrt54GL router, firmware 4.3.7 (latest european) i wanna make a wireless bridge to a non linksys router. the helpdesk wasn't very helpfull( i think a first-day employee.) i have found this:
http://www.dd-wrt.com/wiki/index.php/Wireless_Bridge
but then i have to update the firmware which isnt supported'.
Does somebody know how to do this?
my wishlist:
1) router makes connection to other router. and uses the samen network
2) my router also works still as an access point

i flashed it with 3rd party firmware like the dd-wrt. Al whole kind of options becomes available. i can now select a client-bridge modus and see the other wireless networks. did the tutorial on the above site. my router keeps on blinking, i thought oh now now its broken. but after holding the reset button for 30 seconds it becomes alive again. and then i update the final generic-dd-wrt firmware
process: backup router-->firmware dd-wrt mini---->firmware dd-wrt standard-->backup router--> follow steps mentioned in the wiki pages on dd-wrt

Controller - Bridge or Router?

Hello,
I have what I think is a very basic question about the WLAN Controllers yet I can't seem to find the answer in the manuals.
The "thick" Cisco APs act as L2 bridges. They forward frames at L2. How do the Controllers work? Are end user packets tunneled inside LWAPP frames from the AP to the Controllers or is LWAPP just for the communication between the AP and Controller? Can the APs use a seperate VLAN for end user traffic and AP-Controller LWAPP traffic (a management VLAN)? Do end user frames have to go through the Controller to reach the rest of the network or does the AP put them directly on the proper VLAN like the Thick APs do?
I've checked the Controller manuals and it isn't clear to me. If I've missed something, please point it out.
Thanks,
Serge

Cisco wireless LAN controllers are ideal for enterprise and service provider wireless LAN deployments and provide system wide wireless LAN functions, such as creating and enforcing security policies, intrusion prevention, RF management, quality of service (QoS), and mobility. They work in conjunction with Cisco lightweight access points and Cisco Wireless Control System (WCS) to provide the control, scalability, and reliability that IT managers need to build secure, large-scale wireless networks.
Cisco wireless LAN controllers smoothly integrate into existing enterprise and service provider networks. They can communicate with Cisco lightweight access points over any Layer 2 (Ethernet) or Layer 3 (IP) infrastructure using the Lightweight Access Point Protocol (LWAPP). With Cisco wireless LAN controllers, important wireless LAN configuration and management functions can be completely automated across all enterprise and service provider locations-from branch offices to outdoor campuses.
For more information on WLAN controllers read, http://www.cisco.com/en/US/products/ps6307/products_qanda_item0900aecd802570be.shtml

BRIDGE vs ROUTER

Similar Messages

Maybe you are looking for