Guest Network Access via Lan Port

I bought two of the new Apple Airport Expresses and have the Wireless working just great. I have the second one as an extender also working just as I need it to work. But is there a way to use the LAN port on either of the the units (either the Primary Access Point or the Extended one) to allow someone to connect their computer or other device via hardwire but join as a Guest Participant (so they're segregated from the rest of the network)?
Or is there a way I can connect the device to the LAN port, assign it an IP Address and then use some of the advanced tools to block it from everything else on the network except for using the internet?

No, sorry but the Guest Network cannot be extended either by wireless or Ethernet.
is there a way I can connect the device to the LAN port, assign it an IP Address and then use some of the advanced tools to block it from everything else on the network except for using the internet?
No, this is not possible with the AirPort routers.

Similar Messages

Cascading EA4500s and Guest Network access

Hi, I hope esomone can help me here. I've got two EA4500 routers connected via ethernet. The primary router has DHCP enabled and the secondary has it disabled. IP address of primary is 192.168.1.1 and the secondary is 192.168.1.2.
I have set up guest access on both routers however only the primary router allows users to connect. When out of range of the primary router but in range of the secondary router the network is visible but when you try to connect to it, it only gives limited or no connectivity message and can't connect to the internet.
Is it possible for the guest network access to follow the same pattern as the secure network, i.e. the same network throughout the house?
Regards
Jon

Cascading two routers should have correct parameters set. For instance, the Ethernet port of the secondary router should be connected to the ethernet port of the primary one, and the DHCP should be disabled on the second router. The ip address you've set are correct for the both routers. This thing shoud be done if the connection is LAN to LAN.
By the way there are two types of cascading: Click here for info!
For the Guest Network:
Guest Network would only work if the the DHCP is enabled on your router. It means to say that on the type of setup you're doing which is LAN to LAN (DHCP disabled on the second router), Guest network would not work on the secondary router. If the connection is LAN to WAN, then both of the router should have Guest Network working.

Airport Extreme 802.11AC + 5th Gen and guest network access

I have the current gen Airport Extreme 802.11AC with a 5th Gen extending the network. With this setup, I am unable to login using our guest network setup. I have tried using guest network with a password and one without but its the same results. When a guest logins, it stuck attempting to login with no error messages.
So is it possible to have this configuration and still have guest network access?

Please review what I said originally.......that the guest network function on the AirPort Extreme is designed to work with a simple modem......so the AirPort acts as the main router for the network..
Another way of saying the same thing is that the AirPort needs to be "in charge" of your network for the guest feature to work correctly. The AirPort cannot be in charge if it is connected to another device that is already configured to be the main router on your network.....your Actiontec modem/router.
The Actiontec device combines the functions of a separate modem and a separate router in one package. This type of device is known as a modem/router, or also known as a gateway.
Some folks call a modem/router or a gateway......a modem. So, things can get confusing.
I do not know if it is possible for the Actiontec device that you have to be configured to act as a simple modem.....so the routing functions of the device are completely turned off. (Turning off the wireless on the Actiotec does not turn off the routing function).
If you turn off the wireless on the Actionec, it becomes a modem and a wired router. And that wired router is still in charge of your network.
The guest network feature will not work correctly unless the AirPort is in charge of your network.
My suggestion was for you to ask your Internet Service Provider (ISP), if they could supply you with a simple modem. That is all that you need. You don't need two routers....and the Actiontec that you have now is not allowing the guest feature to work correctly.

Can an airport receive via wifi and share via lan port to a tv ?

Is it possible for an airport express receive net via wifi and share it via lan port to a tv with lan card ?
Thanks
Jorge

Yes, if the AirPort Express is an 802.11n model. This version of the Express support the configuration as a wireless Ethernet bridge. Apple calls this configuration a ProxySTA.

Guest Network access

Hello,
Im trying to setup access for our guests to go out a specific interface/ISP
We have our main connection to our datacenter.
We also have a little SAT Receiver that we get internet from (10MB).
I want a specific vlan to go out ONLY to that SAT Receiver connection. Here is my setup:
Guest Network
vlan 216
name WIFI-Guests
SAT Receiver
interface Vlan70
ip address 192.168.151.2 255.255.255.0
interface Vlan216
description Guest WIFI
ip address 10.2.16.1 255.255.255.0
ip helper-address 10.2.1.26
Can this be done via vrf, and how? Or is there an easier way?
Thanks...

Just noticed that you are using an ip helper-address which means you won't be able to use a VRF effectively as your guest network needs access to the vlan with the DHCP server in it.
Assuming you want to keep DHCP for this network on the DHCP server then probably PBR is better ie.
access-list 101 permit udp any any eq bootps log
access-list 102 permit ip 10.2.16.0 0.0.0.255 any
route-map PBR permit 10
match ip address 101
route-map PBR permit 20
match ip address 102
set ip next-hop
int vlan 216
ip policy route-map PBR
note that with the above the first acl has to allow DHCP to get through to the DHCP server. Normally with PBR you would simply use just the one acl eg.
access-list 101 deny udp any any eq bootps
access-list 101 permit ip 10.2.16.0 0.0.0.255 any
but with the 3750 (and some other switches) if you use deny lines in the acl this can cause CPU issues on the switch. So a different acl is used for each PBR entry. The first PBR permit entry uses acl 101 and simply matches DHCP traffic and does nothing so it is routed normally. The second PBR permit statement uses acl 102 and matches all other traffic ie. internet and sends it to the SAT device.
Also worth saying that all traffic is sent to the SAT device but you should also apply an acl on the SVI for vlan 216 to stop traffic from vlan 216 clients to other vlans. The PBR would send this to the SAT device anyway but the SAT device might then route it back to the switch which you don't want. So your acl would look like -
access-list 103 permit udp any any eq bootps
access-list 103 deny ip 10.2.16.0 0.0.0.255
etc. for each internal subnet
access-list 103 permit ip 10.2.16.0 0.0.0.255 any
int vlan 216
ip access-group 103 in
Hope all that makes sense. If not please come back with any questions you have.
Jon

Load Balance guest Internet access via two different DMZ zones at two sites

Hi Sir,
My customer has the following unified wireless guest access requirement:
- There are 2 internet links and dmz zones at two different locations, Site A and Site B
- Data centre is at Site A
- WiSM is proposed to be installed at the Cat 6500 in Site A
- Lightweight AP are distributed across Site A, Site B and other branches
- Only one anchor WLC is proposed at Site A, DMZ zone to provide guest internet access
My customer would like to load balance the guest via the two internet link at Site A and Site B but with the same SSID across all locations. Can it be done since only one anchor at Site A? How about puttting another anchor WLC at Site B, DMZ zone? But how can i establish two EoIP tunnel to two different anchor WLC from a single WiSM?
Thanks for your help
Delon

You can... but you can't control where the traffic will flow. The wlc will determine which DMZ wlc it will use. The wlc will load balance, but traffic in site A might go to site B. I currently have deployed that senerio in multiple client installations....

Does or will the Airport Extreme be able to share the Guest network to a Ethernet port?

Did not know if there was or possibly will be the ability to seperate ethernet ports to make a hardwired guest network?

Sorry, not possible to extend the Guest Network using either wireless or Ethernet.
You might want to let Apple know on any new features that you want to see.
Apple - AirPort Extreme - Feedback

EA4500 - Filter Guest Network Access

Is there a way to filter guest network to restrict what services they can access? Support won't email me back.

Guest Network is designed for devices that you do not want to have access with the devices connected to the main network.
What services are you referring to for guest network users to get restricted? You might want to check the link below.
http://www6.nohold.net/Cisco2/ukp.aspx?vw=1&docid=f35bd58fda4148929ac482f3c7968e04_Guest_Network_Fre...

E3000 guest network access problems

Hi,
I have the E3000 router and am using an Engenious repeater. I only turn on the repeater when I'm playing PS3 because it boosts the signal dramatically. However, if someone in my house is connected to the boosted network when I'm using the PS3 I get horrible lag on my PS3. Yesterday I tried connecting the laptop to my guest network while my PS3 was connected to the boosted network, and it worked great. Now, however, I'm unable to connect to the guest network on my laptop. It takes 2 minutes to identify the network and then when it connects it says no internet access. I have the Cisco connect software installed on the laptop. When i run the windows 7 network troubleshoot it detects a problem with the network adapter and says it resolved the problem, but really it just connects me to my main wireless signal and not the guest one.
Thanks in advance for any help

Guest network is unsecured wireless network and it works on 2.4 GHz wireless band.
If you are able to connect to the main network then I think there should not be any problem to connect to the guest network.
The main network has the IP address in the range of 192.168.1.xxx whereas guest network works on 192.168.33.xxx IP address. You have installed the Cisco connect software on your laptop. I think your laptop might be trying to connect to the main wireless network automatically.
You can try upgrading the firmware on your router and see if that makes any difference.

EA3500 - Guest Network Access

Help! Took me 10 years to get another wireless router in my home, because last time, It wasn't secured and people were practically parking in my driveway to use it. Anyway, I have a guest network - unsecured. how the heck do I change it to secured, or eliminate the guest network all together?
Solved!
Go to Solution.

By default the guest network will show unsecured on the available wireless network but in reality it is not really unsecured because once you are connected to the wireless network and you attempt to get online then it will now ask for the guest access password. You have two options on how to configure the guest access password on your router, either by using CCC or the classic ui. If you are using CCC, just access the router’s ui then click on guest access. From there, you will have the options to enable/disable guest access or change the password. If you are using the classic ui, once again access the router’s ui then click on wireless>guest access and from there you will also have the option to to enable/disable guest access or change the password.

IMac G4 800 mhz internet access via LAN very slow

We have a G4 800mhz running 10.3. Memory is 768K. The only use for this machine is as a music server. It is connected to the internet via LAN; internet access is extremely slow - pages take an incredibly long time to load. Download/Upload speeds are about the same as I see on my Macbook Pro so I don't think it is the connected to the internet. Is there anything one can do to troubleshoot very laggy browser performance?

You may need to turn to Activity Monitor (or "AM") in Applications > Utilities to see if a runaway background process is eating up processor cycles. If you've not run AM before, on first launch its "Show" window defaults to "My Processes." That will tell only part of the story. Change it to "All Processes"to get the full picture.
Now highlight the "%CPU" column to sort by processor usage. Best to check with no user apps running other than AM. Let AM percolate five to ten seconds to let it finish its first poll. What you are looking for are any processes that are using 15 percent or more of "%CPU" with nothing running other than AM. If you find one, post its name here and we can advise how to deal with it.
However, don't get your expectations too high that a process has gone rogue. Part of it is simply a lack of speed by today's standards. I recently upgraded a friends iMac G4 800 from Panther to Tiger so it could run the latest browsers and it was still terribly slow compared to my PowerBook G4 1Ghz running the same level OS. The iMac 800 has a slow logic board bus (100mHz).

Disable access via insecure port 7001

Is there a way in OVM Manager 3.1.1 to disable access via port 7001 and only allow access via the encrypted port 7002 through the web interface? I have a customer that is trying to lock things down security wise and they would like to see that happen. Thanks!

Did you try this in the weblogic console?
http://yourserver:7001/console

How to setup 24 hours guest network access with Time Capsule 4th gen. ?

Hello,
I just bought a Time Capsule 2TB and I cannot find the setting to limit the network access to 24 hours.
I updated the firmware and Airport Utility to the latest version and it seems that most of help on this setting I fond on internat are based on previous version.
By example I do not have a "Manual setting" in the "Base Station" menu like described in the manual.
Can someone help on this ?
Thank you and Regards,
Sebastien

Suggest that you download and install AirPort Utility 5.6 for Mac OS X Lion. It will have the settings that you are looking for.
You can keep both AirPort Utility 5.6 and 6.0 on your Mac and use the one that you need.

Guest Network access issue on Apple Airport Extreme 802.11AC router and Actiontec MI424WR Rev.1

I contacted Apple because I am not able to create any guest Network on my Airport Extreme because I was told that my modem needs to be simple. Per Apple: "The Guest Network feature will not operate correctly unless your "main" AirPort Extreme is connected to a simple modem........not a modem/router (such as the Actiontec MI424WR Rev.1) or gateway type of device that is often furnished by Internet Service Providers to their customers."
So is it possible to make this version of Actiontec a simple modem. Is this even possible or will I need a new modem?
NOTE: I disabled the wireless functionality of the actiontec.

Do you have FiOS TV ? You can completely bridge the ActionTec or take it out of the equation entirely if you don't have TV to worry about. Or, you can make the Apple router your primary and put the ActionTec behind it, with the trade-off that things like Remote DVR and Caller ID on TV won't work the best.
========
The first to bring me 1Gbps Fiber for $30/m wins!

Application And Gaming / Port Forwarding || HELP NEEDED || Can Only Access Via LAN

Hi.
I have just bought a Wireless Router, Model Number: WGKPC354G-UK. With the intention of setting up a small server. This server will run from my PC (directly wired into router), running a game called "Counter Strike" - I had to download a dedicated-server tool for this and i successfuly installed this and followed the tutorial to set it all up..
So I thought i had done it, but I could only access my server with my internal IP 192.168.1.64 (LAN).
I then found out that i needed to "Port-Forward" I followed a tutorial on www.portforward.com - This showed me how to open the ports, and which ones to open.
I did all this and i still encounter the same problem !
So i then opened all my router ports "DNZ" and it still doesnt work !!!
Any help will be greatly aprreciated !
PS. Below Are The Required Ports.
http://portforward.com/english/routers/port_forwarding/Linksys/WAG354G/Counter_Strike.htm

Keep in mind your ISP could be blocking the ports needed. DMZ almost ALWAYS works and if it doesnt, most likely your ISP blocks the ports.
another test is to make sure you can connect to the game server from another CS machine on the inside of your network. If this works, that means your server is up and running properly and its probably your ISP blocking certain ports needed for the CS Server.
You should also check you have the Windows firewall disabled, and any other software firewall on your server disabled.

Guest Network Access via Lan Port

Similar Messages

Maybe you are looking for