Firewall for wireless deployment

Hi all,
I am currently working on a client RFP. They are inquiring about wireless controllers and AP alongwith Firewall and IPS/IDS solution for wireless. I want to know that does wireless lan controller (5760 in this case) supports firewall/IPS/IDS or is there any other box designed for this purpose ?

To be honest... No. Cisco has a wIPS feature but that requires NCS or Prime infrastructure along with an MSE. There is no built in firewall. They must be looking at an Aruba solution to be honest.
Sent from Cisco Technical Support iPhone App

Similar Messages

  • Configuring AppleTV for Wireless deployment without WLC (881- 3560- AP)

    Hi Guys,
    I have read the Wirelss deployment guide provided but i do not seem to get AppleTV to work on the wireless network. When connected to the wired network - all is ok.
    Design -
    Cisco 881 -> 3560 -> AP
    Here is what i have so far:
    Router Config:
    ip multicast-routing
    no ip igmp snooping
    interface FastEthernet0
    switchport mode trunk
    interface FastEthernet1
    switchport access vlan 5
    interface FastEthernet2
    switchport access vlan 5
    interface FastEthernet3
    switchport access vlan 5
    interface FastEthernet4
    mac-address *****
    ip address *****
    interface Vlan1
    ip address 192.168.0.5 255.255.255.0
    ip pim sparse-dense-mode
    interface Vlan5
    description --Data--
    ip address 192.168.5.254 255.255.255.0
    ip pim sparse-dense-mode
    interface Vlan6
    description --Media--
    ip address 192.168.1.254 255.255.255.0
    ip pim sparse-dense-mode
    Switch config
    A-01#sh run
    ip igmp snooping querier
    vlan internal allocation policy ascending
    vlan 5
    name Data
    vlan 6
    name Media
    interface GigabitEthernet0/1
    description <<To_G-01>>
    switchport trunk encapsulation dot1q
    switchport trunk allowed vlan 1,5,6
    switchport mode trunk
    switchport nonegotiate
    interface Vlan1
    ip address 192.168.0.223 255.255.255.0
    ip pim rp-address 192.168.5.254
    AP Configuration
    no ip igmp snooping
    no dot11 igmp snooping-helper
    Please help me properly configure the network to support AppleTV. We currently use vlan 5 and 1 only. vlan 1 is management and vlan 5 - basically data and media.
    Regards,
    Faith

    Am used to it being called IOS
    Here we go.
    flash:/c1140-k9w7-mx.152-2.JB/c1140-k9w7-mx.152-2.JB
    You believe I should downgrade to v12?
    Could we first confirm that the configuration is ok so that i can resort to downgrade as a last resort because the AP is in exploitation at the client's site.
    Could you please confirm that my multicast configurations are correct ?
    Thank you for your time Scott!
    Faith.

  • Tools for wireless survey

    Do any partners use tools they feel are easy to determine cell overlap for wireless deployment? We use the 7921 phones survey tool but are looking for feedback on what else is used in the field.

    We have a non-production WCS server that can be used for predictive assessment by uploading the map or you could use AirMagnet Surveyor to perform real-time data collection.  Other than that I suppose you could take readings with NetStumbler or another wireless RSSI utility to ensure coverage/overlap.

  • NAC Out-of-Band Deployment for wireless networks

    I am evaluating the NAC appliance for my wired and wireless users. I have read that the only way to deply NAC for wireless is in-band mode but it looks like the following link says that it is possible to deply NAC for wireless networks in-band or out-of-band mode:
    "NAC Appliance can be deployed for WLANs as an in-band deployment for full-time endpoint scanning or out-of-band within a central site for periodic scanning to confirm posture compliance. The NAC Appliance server performs authentication, posture assessment, and remediation. The server securely controls authenticated and unauthenticated user traffic by managing traffic policies based on protocol/port or subnet, providing bandwidth policy management based on shared, or per-user bandwidth, or using time-based sessions and heartbeat controls. (Figure 1)"
    http://www.cisco.com/en/US/prod/collateral/wireless/ps5678/ps6521/prod_brochure0900aecd80355b2f_ps6128_Products_Brochure.html
    Does anyone know if it is possible to use NAC out-of-band deployment for wireless networks? If you can point me to some documentation it will be appreciated.
    Regards

    Thanks Robert.
    In my case I am planning to deploy a central NAC appliance at the main office to control some branch offices and local wired users at the main office. The NAC appliance will operate in out-of-band mode. But for wireless users at the main office I will need an aditional NAC appliance operating in in-band mode, is this correct?
    Regards

  • Which PI is better for Wireless, 1.4 or 2.0?

    Simple question:- Which Prime Infrastructure is best for managing a Cisco wireless solution, Version 1.4 or 2.0?

    Hi Simon,
    Of course 2.0 version is new and hav many other features which PI 1.2 dont have.
    Example:wts new in 2.0
    Extended Device Support and Scalability (Wired / Wireless)
    _With Prime Infrastructure 2.0, you can manage up to 13,000 wired devices, up to 1,000
    controllers, up to 20,000 Unified Access Points, up to 3,000 autonomous Access Points, and up
    to 1,000 Network Analysis Modules.
    – Day-1 support of new Cisco devices and software releases helps ensure up-to-date coverage
    with no manageability gaps, which is provided through monthly IDUs-Incremental Device
    Updates.
    Guided Workflow for Day1 Deployment
    – Streamlined workflows facilitate design, deployment, and operational lifecycle tasks that align
    with user roles.
    Plug and Play for Wired/Wireless Devices
    Out-of-the-Box Best Practice Configuration for Optimized Deployment of Cisco Features and
    Technologies
    – Model-based simplified workflow to assess the network for Cisco TrustSec 802.1x readiness
    and facilitate the deployment of network technologies and solutions, such as one-click AVC
    Configuration from device work center, Cisco TrustSec 802.1x and Zone-Based Firewall (ZBF),
    all based on Cisco best practices.
    Support for Wireless LAN Controller (WLC) Release 7.4
    want to know more:
    http://www.cisco.com/en/US/docs/net_mgmt/prime/infrastructure/2.0/release/notes/cpi_rn.pdf
    As per my exp....PI 2.0 is bit slow then PI 1.2.
    Regards
    Dont forget to rate helpful posts

  • Where is the official documentation for Wireless OTA Enterprise App Distribution?

    Where is the official documentation for Wireless OTA Enterprise App Distribution? It used to be here:
    http://developer.apple.com/library/ios/#featuredarticles/FA_Wireless_Enterprise_ App_Distribution/Introduction/Introduction.html
    The above link is present in many posts in these forums (cf. More Like This below this question.
    The information I seek may also have been here:
    http://support.apple.com/kb/index?page=answerlink&url=http://manuals.info.apple. com/en_US/Enterprise_Deployment_Guide.pd…
    The article in question had official details on
    the itms-services:// link,
    the app manifest file format and
    the general information.
    Currently I cannot find anything official on enterprise app distribution - only third party information. Has something changed, or is this a documentation glitch? Surely wireless OTA enterprise app distribution is still available via the enterprise developer program?
    Note: We currently use this for one of our enterprise clients. But before recommending other clients to join the enterprise developer program, we would like an official citation on whether this mechanism still exists.

    OK, the link in my question is no longer a 404. It's been replaced by a redirect to a new iOS Enterprise Deployment subsite which has been remade for iOS 8.
    http://www.apple.com/iphone/business/it/deployment.html
    My actual question about the technical reference is now located in the iOS Deployment Reference section of Apple Help:
    https://help.apple.com/deployment/ios/#/apda0e3426d7

  • DMZ Anchor WLC setup for Wireless Guest Access

    I have the following setup.
    A DMZ WLC 4402 connected to firewall DMZ interface in 10.10.73.0/24 network.
    An Inside WLC 2106 connected to firewall Inside interface in 10.10.71.0/24 network.
    Both WLCs are running the same 4.2.176 code.
    DMZ WLC is anchor to itself and Inside WLC select the DMZ WLC as the anchor point.
    I have setup EoIP between DMZ and Inside WLCs successfully with both the control and data path both show as UP status. >> "show mobility anchor"
    The main issue: Clients cannot obtain IP addresses after connected to Guest SSID.
    1. Inside WLC, the guest WLAN ingress is 802.11b/g radio and egress port is set to management interface (EoIP) of type WLAN.
    What is the DMZ WLC setting? Is the ingress set to "802.11b/g" which does not make sense because the ingress is EoIP from Inside WLC?
    Or I still set as 802.11b/g? Same config as Inside WLC? I read from other threads suggested by Terry that the config must be the same for both WLCs.
    In the Inside WLC, I saw alot of pdu encapsulation errors for broadcast packets which is ffff.ffff.ffff xxxx which I think is the DHCP request from the connected Wireless clients not making through the EoIP tunnel. I have set static ip for the Wireless client but the packets cannot route through the EoIP tunnel to the far end.
    2. DHCP server is provided by DMZ WLC with the scope 10.10.76.0/24. In the Inside WLC, which DHCP server IP adddress to set to? DMZ WLC mgmt ip address? DMZ WLC, the DHCP server is also set to DMZ WLC mgmt ip?
    3. Layer 2 authentication. I read that DMZ WLC is supposed to be the DHCP server, Layer 2 or 3 authentication for Wireless Clients. However, it seems like Inside WLC is required to configure the Layer 2 authentication parameters and the DMZ WLC is set to providing the DHCP service?
    4. Lastly, anyone has done DMZ WLC sending the Wireless clients traffic to Bluecoat proxy server before hitting the Internet?
    Thanks.

    One of the biggest things is to make sure the wlan is configured exactly the same. The DMZ WLC ingress is the management and also is the egress port. You can create a dynamic interface on the DMZ WLC, but this way makes thing easier. The DMZ WLC should provide the dhcp, so the dhcp scope of course will be on the same subnet as the management of the DMZ WLC. The DHCP Server will be the ip address of the management interface of the DMZ WLC. The authentication also has to be configured exactly the same on the inside wlc and the DMZ wlc. Since you are pushing clients through the tunnel to the DMZ WLC, that is where clients will need to get their ip address, since that DMZ WLC has a network interface to the guest network. I haven't had luck when a proxy is involved, but I know there was a post a while ago on how to setup the proxy to allow the wlc to bypass the users initial dns resolution.

  • Initial configuration of ACS 5.1 for EAP authentication for Wireless clients

    Hi,
    I have set-up with below devices :
    Wireless LAN controller 5508
    LAP 3302i
    and ACS 5.1
    since i am new in ACS 5.1 configuration , I need so information to go ahead to configure ACS 5.1.
    which EAP method to use for wireless client authentication ? what is the best practice ?
    I have gone through some cisco documents and it shows that best practice is to configure PEAP but for the same , I need to install certificate in ACS server as well in client PC. is that so ?
    I have no clear picture for this certificate ?
    from where i can get this certificate or do i need to purchase this certificate separately from cisco. how to install it in ACS server ?
    I will be obliged to get atleast initial configuration for ACS 5.1 to enable the EAP method,
    I need GUI based initial configuration for ACS 5.1
    This mentioned ACS 5.1 is installed on ACS 1121 hardware appliance.

    Hi,
    which EAP method to use for wireless client authentication ? what is the best practice ?
    -> I would advise the most widely spread EAP method, which has the best ratio security/easy to deploy: PEAP with MSCHAPv2, which is available by default by all windows machines.
    I  have gone through some cisco documents and it shows that best practice  is to configure PEAP but for the same , I need to install certificate in  ACS server as well in client PC. is that so ?
    -> You will always need to install a server certificate, however, there is no need for client certificate because the authentication is based on the MSCHAP credentials exchange, not certificate based. The only requirement on the client regarding certificates is the following.
    If you want to validate the server certificate, you have to install the server certificate under the trusted CAs of the clients.
    If you do not require to trust the server certificate, you can simply disable the option of server certificate validation.
    I have no clear picture for this certificate ?
    from  where i can get this certificate or do i need to purchase this  certificate separately from cisco. how to install it in ACS server ?
    -> The server certificate can be a simple self signed certificate that you generate and install on the ACS GUI.
    Please feel free to follow this step-by-step guide on
    PEAP under Unified Wireless Networks with ACS 5.1 and Windows 2003 Server:
    http://www.cisco.com/en/US/partner/products/ps10315/products_configuration_example09186a0080b4cdb9.shtml or in pdf
    http://www.cisco.com/image/gif/paws/112175/acs51-peap-deployment-00.pdf.
    HTH,
    Tiago
    If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.

  • NAC for wireless layer 3 oob

    Hi,
    Anyone implemented nac for wireless layer 3 oob? This is using nac appliance not ise.
    What I did is to configure wlc as per layer 2 oob setup. Configure svi 669 (authentication/quarantine vlan) on switches that’s with the wism. Pbr all vlan 669 traffic to test cas untrusted interface.
    Problem now I’m not able to get an ip from dhcp after associating. DHCP works when tested on wired. Is there any additional config to be done on WLC or am i doing it right??
    The test cas/cam are ugraded to ver 4.8.2.
    Regards
    Joachim

    Everyone can do a mistake and it seems I did a big one :-)
    l3 wireless OOB was not supported until last version :
    §Wireless L3 OOB RIP has been introduced in 4.8.2.
    §In order to support wireless in L3 OOB RIP deployment – DHCP release and renew values were propagated from CAS to the client so that client can perform IP refresh.
    §The configuration of WLC and AP’s needs to be done like in Wireless L2 OOB VGW deployments.
    §There are no ports in WLC hence Port profile is not required
    §WLC allows only two VLAN’s namely Quarantine (Auth) and Access VLAN’s. Hence the support for User role Vlans is not there in Wireless deployments.
    §iPhone/iPad support is also not present. Reason being IP address cannot be refreshed in iPhone/iPad due to lack of support for Java Applet/ActiveX.
    §The authentication trap control needs to be checked in order for the WLC to send 599.0.4 trap.

  • Want to use LWAPP Bridge on mobile cart in our wireless deployment.

    Want to use LWAPP Bridge on mobile cart in our wireless deployment.
    Question.
    I have several mobile carts that use an automous AP in bridge mode to connect to our wireless network. The cart machine connects to the ethernet port in the AP. We use this for ultrasound carts, moble video units, cardio-echogram machines. I need the same functionality, but I want to have the AP(s) be LWAPP for better managability and troubleshooting capabilities. I plan to put them in their own AP group.
    How can I do this? Thank you in advance.

    No, but there is for the 1262 and 1142 which won't be discontinued for awhile yet probably. Most newer items are starting to have wireless cards installed in them thus removing the need for bridges, this is a trend that we will probably see more of going forward.

  • Can not connect All in one 209b to new router for wireless printing....

    Have an HP laptop and All in one priner 209b.  All was working fine, wired and wireless printing.  Then we had to upgrade our ATT Uverse router.  Everything works...even wireless laptop and printer when connected to laptop.  However, can't get printer to printer wireless since it has the old router info.  I used the disk but when it asks to you to pick the printer, I choose the printer but it says printer now found ??? what ???? and this is with the cable connected.  I do not have the wizard on the touch screen but I did reset to factory settings hoping it would load new router info but it does not.  How do you manually enter router into for wireless printing.  Is it best to delete the printer and reinstall as new...wired and then wireless ???
    I am about to call an outsite company and pay the outrageous charge as the help on HP is not working.  Thanks

    Try this utility:
    http://h10025.www1.hp.com/ewfrf/wc/document?docname=c02114394&cc=us&dlc=en&jumpid=reg_r1002_usen&lc=...
    007OHMSS
    I was a support engineer for HP.
    If the advice resolved the situation, please mark it as a solution. Thank you.

  • I have an IMAC that runs OS 10.6.7.  I use Netgear for wireless. My computer keeps losing the network, so I can't use wireless.

    I have an IMAC that runs OX 10.6.7. I use NEtgear for wireless. I have a laptop and Ipod that I use on the wireless. Recently, my desktop computer shows that it is searching for the wireless system (on the router). I contacted Netgear. They talked me into buying another router and their technical contract. Nothing is working. I can plug my  5200 modem directly up to my desktop , and the  network is fine, but the wireless, of course, is not plugged in. When I go to connect the wireless, it doesn't work. This is not a computer program per se, nor is it a router program because sometimes it will work. It seems to me that the computer and router are not working together to hold the settings.
    I have attempted to download the latest software for my computer, i.e., Imac graphics fireware. Each time I try, it says that the extensions are not valid for my computer.
    Any suggestions?
    Thanks, Vicki

    Imac graphics fireware.
    Did you mean to say firmware? You should only install firmware updates when offered to you via Software Update; other than that, whatever is offered is not appropriate for your model.
    As for your Netgear router - I have a Netgear and set it up manually on their web interface setup site (the address should be in your manual). Did you call your ISP so they will recognize that there is a router involved? Sometimes my iMac also does not want to communicate with the router; however, my Macbook and printer have no problem. I solved the problem by connecting things this way:
    cable from wall to modem > cable from modem to router > cable from router to iMac. The other things are wireless.

  • How to set up Airport Extreme with Charter ARRIS Modem TM902A for the first time for WIRELESS.

    How to set up Airport Extreme with Charter ARRIS Modem TM902A for the first time for WIRELESS.
    When Charter Tech goes to your site, have them connect the modem up, but do not connect the modem to your iMAC or MacBook Pro.  What you want to do is connect the Airport Extreme to the iMac or MacBook Pro first with the Ethernet Cable. You have to do this to configure via Airport Utility to set up the Base Station Name & Base Station Password.
    You will then create/configure a Wireless Network, create your Wireless Password that will be entered on each of your Devices, example, Apple Tv, your iPhone, etc., you want to allow access to your Wireless Network you are creating.
    Wireless Security will be -> WPA/WPA2 personal or just WPA2
    Enter the Wireless Password you want
    Verify the Wireless Password (enter it again)
    After it is created you will see it on the Airport Utility window with the name you created for it and to the left, will be a Dot (circle that will be yellow).
    Next you then want to unplug the power to the Airport Extreme, and then take the end of the Ethernet cable you unplugged from the iMac or Lap top MacBook Pro and connect it to the back of the Modem.
    Next unplug the power cord from the modem and wait about 5 minutes, then plug the power back into the Arris Modem and wait until all lights come back on the modem wait
    about 5 minutes, then plug the power cord back to the Airport Extreme and you will see it the light blinking yellow.  Wait about 5 to 10 minutes, during this time Restart you IMAC or MacBook Pro, and once it is back up click on the Airport Utility and you should see on the Airport Utility screen.
    For INTERNET to the left the light should be green and you should see the Airport Extreme also appear and the light to the left on the screen should also be green.  If they are, you then should be able to click on the Wireless Symbol on top of bar of the screen and click to select the Wireless Network Name you created.
    If you Do Not See the light (Icon) next to INTERNET turn Green, or if you see the Internet Light Green, but the Light (Icon) next to the Airport Extreme is yellow, unplug the power again to the modem and unplug the power again to the Airport extreme and wait about 15 minutes or up to 30 minutes. Then plug the power cord back to the modem wait till all the lights light up then, plug the power cord back into the Airport Extreme and Restart your iMAC or MacBook Pro.
    The Airport Extreme light should change from yellow to green. Open up the Airport Utility to see what the indicators are showing they should both be green.  Again select Wireless network you created under the Wireless Icon on the top right of the screen. Open Safari and see if you are able to Route to a web page or the apple site should appear.
    WHAT TO DO IF YOUR AIRPORT EXTREME WAS PREVIOUSLY SET UP FOR USE WITH ANOTHER CARRIERS ROUTER OR MODEM.
    NOTE:  If you already had your Airport Extreme connected for example, I previously had ATT Uverse and the Airport Extreme was connected to the Wireless Router Model 3801HGV, I disabled the Uverse Wireless and used the Airport Extreme for the Wireless signal in bridge mode, as the Airport extreme Signal is much stronger than the Uverse router, and I was able to obtain a Wireless signal with the Airport Extreme way much better with no signal loss which was very very frustrating with the Uverse router.
    Anyhow if you had it hooked up like this, now that you will be using it with the Charter ARRIS Modem TM902A, you will need to reset the Airport Extreme to clear out the old data it has in memory, with the previous set up otherwise it will not work. Trust me I spent 6 hours trying to make it work reading all Apple Support Community questions and answers relating to this type issue/problem others have been having trying to get their set up working. I tried all the tips, and I finally decided just to see if by chance I would be able to connect with someone with Charter Tech support who might be familiar with Apple to be able to assist me and by luck I did.  He told me why it was not working and was all due the previous configuration with the ATT Uverse router was still in memory with the Airport Extreme. Finally it was 10:30 PM when I decided to call Charter Tech Support and I had been working on this since 3:00 pm pacific. I did not call them earlier as all the post I read said they never received any good help from Charter. After calling them I finished up by 11:00 PM and was able to finally connect Apple Tv, iMac, iPhones and Macbook Pro. We love our Apple Product and Happy all is connected with the new
    Internet Provider Charter. I must say the speed is way way much better than it ever was with AT&T Uverse. 
    THIS IS WHAT YOU WILL NEED TO DO:
    First you will need to unplug the Airport Extreme, then by taking the tip of a pen or paper clip end you need to push the reset button on the back of the Airport Extreme and hold it
    down and at the same time plug the power cord back into the Airport Extreme count to 5 or 10 then release the reset button. Then once he light in front of the Airport Extreme stops blinking you need to plug the Ethernet cable from the Airport Extreme to your iMAC or Macbook Pro, and restart which ever one you have, then open the Airport Utility once it is back up.  If you see airport extreme pop up with the old network name or it shows and yellow triangle click on the Airport Extreme ICON it will not let you configure it but will ask if you want to get rid of it or remove and just do it.  Then Again restart your iMAC or MacBook Pro, open up Airport Utility again, and on the top left you should see under “Other Airport Base Stations” the MAC ID for the Airport Extreme.
    You will then create/configure a Wireless Network, create your Wireless Password that will be entered on each of your Devices, example, Apple TV, your iPhone, etc., you want to allow access to your Wireless Network you are creating.
    Wireless Security will be -> WPA/WPA2 personal or just WPA2
    Enter the Wireless Password you want
    Verify the Wireless Password (enter it again)
    After it is created you will see it on the Airport Utility window with the name you created for it and to the left, will be a Dot (circle that will be yellow).
    Next you then want to unplug the power to the Airport Extreme, and then take the end of the Ethernet cable you unplugged from the iMac or Lap top MacBook Pro and connect it to the back of the Modem.
    Next unplug the power cord from the modem and wait about 5 minutes, then plug the power back into the Arris Modem and wait until all lights come back on the modem wait
    about 5 minutes, then plug the power cord back to the Airport Extreme and you will see it the light blinking yellow.  Wait about 5 to 10 minutes, during this time Restart you IMAC or MacBook Pro, and once it is back up click on the Airport Utility and you should see on the Airport Utility screen.
    For INTERNET to the left the light should be green and you should see the Airport Extreme also appear and the light to the left on the screen should also be green.  If they are, you then should be able to click on the Wireless Symbol on top of bar of the screen and click to select the Wireless Network Name you created.
    If you Do Not See the light (Icon) next to INTERNET turn Green, or if you see the Internet Light Green, but the Light (Icon) next to the Airport Extreme is yellow, unplug the power again to the modem and unplug the power again to the Airport extreme and wait about 15 minutes or up to 30 minutes. Then plug the power cord back to the modem wait till all the lights light up then, plug the power cord back into the Airport Extreme and Restart your iMAC or MacBook Pro.
    The Airport Extreme light should change from yellow to green. Open up the Airport Utility to see what the indicators are showing they should both be green.  Again select Wireless network you created under the Wireless Icon on the top right of the screen. Open Safari and see if you are able to Route to a web page or the apple site should appear.

    I just got a Charter Modem. Model TM822. While I was moving, my Airport Extreme was still at my old place.
    I have a Linksys WRT320N I used for the initial Charter setup.
    I can get my Airport to work here, but the Internet light on the Modem flashes Yellow.
    Hasn't caused any issues so far but one thing I did notice.
    On the Linksys there were 3 DNS servers listed.
    The Airport Extreme only lists 2 and i don't see where I could add another, only change whats already there.
    I tried everything above, but light on modem still flashes yellow.
    I have the technicians cell phone. Told me "that shouldn't be" and gave the same advice listed above.
    I'll break down and call Charter one day, see if it's on their end. NSA tracking may need a reset LMAO.

  • I have a Westell 6100G modem.  I want to set up Airport Express for wireless.  Can someone tell me how to do it step by step.  I'm using an HP with Windows Vista.  I'm a tech idiot.

    Just got Airport Express to save on GBs of data.  I have already a Westell 6100G which is for use as Internet Broadband, via Verizon.  How do I set up the Airport Express with this Westell.  Do I even still need the Westell, or do I need to also buy a wireless router?  I'm a tech idiot and this is driving me nuts.

    The Westell 6100G is a combination modem and router or gateway device. The AirPort Express is a wireless router.
    Since the Express does not have a built-in modem, you will still need your Westell gateway in order to access the Internet.
    Which exact model of AirPort Express do you have. It will be written (in very hard to read type on a label on one of the AirPort's sides). It should look something like: A1392. It may also state a Order#. In that case it would look something like: MC414LL/A
    Regardless of which model you have, the basic network configuration would be that you would connect an Ethernet cable between the Westell's Ethernet port and the WAN (circle of dots) port on the Express. (Note: If you have an earlier model of the Express, you would connect the cable to the only Ethernet port on the Express.)
    The good news is that you will not have to make any configuration changes to the Westell. We should be able to use it as configured.
    What we are going to start with is getting a basic Wi-Fi network that should provide your computer with wireless access to the Internet. Once verified as working, we can fine-tune this network to include wireless security and any other goals that you may have.
    Ready to start?
    I would recommend that you do the following as a minimum:
    Power-down the Westell and computer(s).
    While all of the devices are powered-down, perform a "factory default" reset on the AirPort Express base station. This will get it back to its "out-of-the-box" configuration and make setting it up much easier, especially if you use the "Assist me" process within the AirPort Utility. (ref: Resetting an AirPort Base Station or Time Capsule)
    Once the reset has completed, remove the AirPort Express from power.
    Connect an Ethernet cable between the Westell and the AirPort Express.
    Power-up the Westell; wait at least 10-15 minutes to allow it adequate time to initialize.
    Power-up the AirPort base station; wait at least 5-10 minutes. Note: The AirPort's status light may continue to flash amber after it has intialized. That is because, there may be some additional configuration items necessary, like setting up wireless security, before the overall setup is completed to get a green status.
    Power-up your computer(s).
    In this basic configuration, the AirPort base station will broadcast an unsecured wireless network with a Network Name (SSID) of Apple Network NNNNNN. Network clients, connected to the base station either by wire or wireless, should now be able to access the Internet through the ISP's modem. Once Internet connectivity has been verified, you can use the AirPort Utility to configure the base station for wireless security and any other desired options. Please post back your results.

  • Apple ID for the Deployment Program and VPP is the same

    I created an Apple ID for the Deployment Program and authorized the same ID for VPP.  Now I learned these should be different.  Is this a problem and if so, how can the VPP ID be changed?

    You should be able to. The only hiccup will be that any apps that you have purchased with the older ID you will have to repurchase with the newer ID to be able to keep using them.
    Though of course this actually depends on how you plan to use the IDs. For example, I had an Apple ID through iTunes a few years before I opened a .Mac/MobileMe account (what iCloud is now in case you are new to Apple). Thus, my iPhone and iPad actually have two IDs on them, one for iTunes/App Store, and one for anything associated with iCloud. I've never really had any problems assoctiated with having two IDs on one device. Usually just an extra step when I get a new device or have to restore either of them for some reason. Though I understand that this is probably not what you plan on doing, I thought I would use it as an example of what the IDs are really associted with on the devices.

Maybe you are looking for