Guest Network in Bridged Mode?

I'm wondering if you can use the Guest wifi network feature on an Airport Extreme that is in bridged mode. When I say bridged mode, I do NOT mean "extending" a wireless network (like many threads with a smiliar title seem to mean). What I mean is that I have a single Airport Extreme. I want to use it as a wireless access point, while continue to use my ISP's modem/router combo as the DHCP provider. The ISP box will have no wifi enabled. The Airport will connect to that box (via a large switch) and be convfigured as a bridge, instead of "distributing IP addresses" itself.
I know that in this setup, a regular wireless network is not a problem. But I've never tried a regular and a guest network together, while in bridged mode. I'm hoping this is do-able, because I don't think the DHCP in the ISP box can be turned off. Plus we only planned for a single ethernet cable going up a floor to where this airport is going to live. If it is going to be the DHCP provider too, then there would have to be a second ethernet cable, so the airport can logically be between the ISP box and the switch.

This is a valuable answer because it clarifies the one piece of the puzzle as to how this might (or might not) work.
It is obvious that a device connecting to the base station informs the base station as to whether it is on the guest or private network through the SSID it connects to. It's obvious how one can create two overlaid networks through using two different (non-routable) IP address ranges. It's obvious how the base station --- AS DHCP and NAT HOST --- can allocate addresses in these two ranges.
What was not obvious is how this can all propagate out to a third party DHCP server --- how would that server know to allocate IP addresses in one range rather than the other?
But use of a VLAN tag answers that question. Very cute use of a (to home users) rather obscure part of the ethernet spec.

Similar Messages

Guest network in bridged mode (or other non-DHCP mode)

Hello,
I have the (Simultaneous Dual Band II) Airport extreme.
I wanted to use it at work but creating a secure network (my printer, computers, and drives) and a guest network (no password so people can access internet).
They already have a DHCP server (in the past I have a mistake by forgetting to turn off DHCP on a router which assigned other computers IP address (upstream) which conflicted with their DHCP server and all kinds of problems ensued).
So I know that in Bridge Mode, the guest network is turned off.
What are my options? I'm afraid to take if off bridge mode because of the DHCP issue. But I really want to use the dual network mode on the Airport Extreme.
So I don't want to bring down the whole network, can i safely use something other than bridge mode? other ideas?
Thanks in advance for any feedback
(yes I have searched a lot for the issue but I'm not sure what to do)

First, you question the policies about my work place (none of your business).
Sorry for suggesting that you check the policies before you violate something that could get you fired.
But then, you "would bet" that I hooked something wrong (could have asked).
Sorry but that is certainly a higher probability than a router malfunctioning in that manner.
It may not be your intention (just as it is not mine to be ungrateful).
Not sure if you are showing that with your last post.

Guest network and bridge mode

Hi,
my question is, why my guest network doesn't works, if my TimeCapsule works in the bridge mode?
Someone an idea?
Thanks
Albrun

From the latest airport utility and firmware it does work.
I run the TC in bridge and setup the guest to try it.. seems to work for me.
I know there are other issues with using these .. perhaps that is what you mean.. but it does work.

AirPort guest wifi in bridge mode v 6

Oke... seems the configuration is a very limited to what Apple thinks are the basic needs...
What I really miss is support for Guest network in bridge mode. It ALMOST workst in 6... a shame you can't configure a DHCP server for the Guest network when the main wifi is in bridge mode. You can enable Guest, the client just won't get any IP address... Please fix this! A really usefull function since the AirPort Extreme is used in situation where it isn't the NAT, DHCP or gateway device!
Also it should be possible to configure the DHCP ranges for main and guest should indepently of each other... and simple disable the DHCP function for one or both. Also client isolation is a nice option.
Please make it more Office friendly...
Really make an more advanced view... the aiport is capable of so much more! A pitty it's potential is limited through software configuration issues...
So make it so in the next generation of the configuration utility! Thank you

Please tell Apple what you want here. This support community is comprised of other users, just like you. Apple is not here.
Apple - AirPort Extreme - Feedback

Guest access in bridge mode

I want to set up a secure wireless network in our small office that will also allow clients to access the internet while in our waiting area. I also want to maintain our current wired network, which is connected to the internet through a Nortel router, connected to a DSL modem. Where would the Airport extreme be installed? - i.e., upstream or downstream from the router? Also, looking over Apple's network documentation, it appears that the Airport Extreme would be in Bridge mode when configured on an existing ethernet network with router, but the documentation is clear on the issue of setting up guest access in this kind of configuration.
In case you have not guessed, I am not an IT guy, so will be grateful for any helpful suggestions

Blind Lemon wrote:
I want to set up a secure wireless network in our small office that will also allow clients to access the internet while in our waiting area. I also want to maintain our current wired network, which is connected to the internet through a Nortel router, connected to a DSL modem. Where would the Airport extreme be installed? - i.e., upstream or downstream from the router? Also, looking over Apple's network documentation, it appears that the Airport Extreme would be in Bridge mode when configured on an existing ethernet network with router, but the documentation is clear on the issue of setting up guest access in this kind of configuration.
Guest access and bridge mode are incompatible on AirPort base stations. I'd connect an AirPort Extreme to your DSL modem, connect your wired network connections to the Ethernet ports of the AirPort Extreme, and take the Nortel router out of service. Depending on how many wired connections you need, you may also need an Ethernet switch. Besides the WAN port, an AirPort Extreme only has three available Ethernet ports.

ML wifi dropping fixed by no double NAT on APE, but no guest network in no NAT bridge mode.

ML wifi connections drop on Airport Extreme with dual NAT
I have a 2011 MBP, and a 2010 Airport Extreme. Ever since installing Mountain Lion, the MBP constantly drops wifi connection to the Airport Extreme. It doesn't drop wifi connection at the coffee shop.
Fixed by bridge mode
So I started the AirPort Utility. It informed me the AirPort Extreme (APE) has dual NAT, because the cable modem has NAT, and to change the APE to bridge mode. I did that. It fixed it! No dropped wifi. However, a few hours later, my neighbors came and told me the guest network is gone! So it fixed it for me, but broke my neighbor's connection. So I switched the APE back to NAT. Now my neighbor has wifi but my ML wifi connection is now dropping all the time.
No guest network in bridge mode
The APE doesn't have a guest network in bridge mode: http://www.dslreports.com/forum/r25840392-airport-extreme-bridge-mode-guest-conn ect

Linc, I agree it shouldn't work in bridge mode. I don't like that the Cable ISP is using NAT, but it is. All of these devices attached to my Airport Express are working.
From Aiport Utility:
     10.53.64.1     Internet router address
     10.53.73.8        Airport Express
From System Preferences, Screen Sharing:
     10.53.65.66     MacBook Pro
     10.53.65.65     MacMini (ethernet connected)
                           Neighbor's Playstation (ethernet connected)
                           Neigbhors Windows laptop (wifi connected)
From iPod Touch (http://techtips.salon.com/ipod-touch-ip-address-4209.html):
     10.53.65.153   iPod Touch 4th gen
     10.53.65.67     iPod Touch 3rd gen
Traceroute (both with and without the AE) shows the first two hops identical private IP addresses. So the AE is definitely in bridge mode, not routing. The ISP is giving me a private IP address.
Traceroute with Airport Extreme
traceroute www.apple.com
traceroute to e3191.c.akamaiedge.net (96.16.21.15), 64 hops max, 52 byte packets
1 10.53.0.1 (10.53.0.1) 8.123 ms 7.218 ms 8.513 ms
2 10.0.52.62 (10.0.52.62) 7.651 ms 8.257 ms 7.388 ms
3 static.customer-201-116-nnn-nnn.uninet-ide.com.mx (201.116.nnn.nnn) 13.757 ms 8.553 ms 10.440 ms
4 inet-bcs-snjosecabo-11-s4-2-0.uninet.net.mx (187.130.146.154) 15.486 ms 10.052 ms 10.098 ms
5 bb-la-grand-4-pos0-4-2-0.uninet.net.mx (201.125.19.38) 42.289 ms 42.592 ms 42.945 ms
6 12.89.4.5 (12.89.4.5) 43.300 ms 41.532 ms 42.443 ms
^C
Traceroute from computer plugged directly into Cable Modem. with wifi turned off
traceroute www.apple.com
traceroute to e3191.c.akamaiedge.net (96.16.21.15), 64 hops max, 52 byte packets
1 10.53.0.1 (10.53.0.1) 6.881 ms 7.050 ms 7.557 ms
2 static.customer-201-116-nnn-nnn.uninet-ide.com.mx (201.116.nnn.nnn) 9.341 ms
    10.0.52.62 (10.0.52.62) 7.090 ms
    static.customer-201-116-nnn-nnn.uninet-ide.com.mx (201.116.nnn.nnn) 9.106 ms
From the Cisco thread:
"3. Apr 10, 2010 2:43 AM (in response to chemilio)
Re: Traceroute output: What is the first hop ip?
It may depend on how the ISP do their network infrastructure. I've seen internal IP addresses in the first few hops of a Cable ISP but I can't remember whether was it the 1st hop or 2nd hop onwards.
9. May 17, 2011 1:33 PM (in response to chemilio)
Re: Traceroute output: What is the first hop ip?
Most ISPs use private RFC1918 IP address schemes for their private network. They effectively treat your street as a LAN, then perform NAT/PAT on your behalf at their CO. This means they can translate onto the public IPv4 or IPv6 internet and take a lot more control over the traffic generated by your network/PC"
https://learningnetwork.cisco.com/thread/12254
http://en.wikipedia.org/wiki/Private_network

E4200 Bridge Mode + Guest Access?

Hi,
I'm trying to set up my E4200 in "Bridge Mode," but want to enable a few things in the wireless settings, such as:
a) choosing SSIDs and network keys,
b) enable Guest Access
I've been able to get things working without too much hassle:
* factory reset
* set wireless SSIDs and network keys
* enable guess access and set password
* turn on bridge mode
Everything is basically fine, except that when the device goes into bridge mode it seems that it shuts off *all* web UI. This kind of makes sense, but do I actually understand that correcty? (Or have I simply not found the right connection method?)
If so, it leads to a couple follow-on questions:
a) How do I disable Bridge Mode if I want to change any settings? (Is the answer just 'factory reset'?)
b) Can Guest Access mode work in Bridge Mode?
So far, I have not been successful in getting the device to display the login page for Guest Access. I'm not sure if that's a config problem with Guest Access or if that just doesn't work in Bridge Mode.
Any tips/advice appreciated.
thx

Dude buddy. This is your post:
gv
Expert
Posts: 11,833
Registered: 07-16-2006
0
Re: E4200 Guest Network Not Working [ Edited ]
06-24-2011 10:40 AM - last edited on 06-24-2011 10:41 AM
It's not possible to use guest access in bridge mode. Guest access is only possible when the E4200 operates as router. In bridge mode any wireless network goes directly into the same LAN. Guest separation would not be possible.
Also don't disable the SSID broadcast.
http://homecommunity.cisco.com/t5/Wireless-Routers/E4200-Guest-Network-Not-Working/td-p/406345/highl...
What I'm saying is that it is possible and that I am doing just that on our LAN here at work.
You pegged me on the linksys devices not allowing higher subnets. Alas, I am used to using DD-WRT and Tomato for years now (where you can use any subnet mask) and took for granted that I have not seen a stock linksys GUI in a long time. However, in bridge mode on the E4200 you are able to set subnet masks as you wish...

How do I add a guest network to existing airport extreme configuration?

I have an existing Airport Extreme configuation in my home Wifi network and I want to add a guest access point. When I open the recently updated airport utilities, the screen no longer looks the way it used to, with the side bar on the left and my devices listed there for me to select (I also have an Airport Express). I used to be able to select the Airport Extreme from the left side bar, then hit continue to change any settings. Well now, since it updated, the screen looks different, with internet at the top, pointing to the Airport Extreme, then the Airport Express. When I select the Airport Extreme, it no longer gives me the option to change the settings for it, which is where my problem lies! Any help? I know it's probably something very simple that I am missing, but I'm at a loss.

Why would I download a lower version of AirPort Utility?
To gain more functionality.....since AirPort Utility 6.0 is otherwise known as "AirPort Utility Lite" on the forums. It's a "first try" for Apple with a new look. While it does look nice, it has been downgraded as far as the features are concerned.
For example, if you open AirPort Utility 5.6 and click on the AirPort Extreme on the left, your Generation version will be displayed on the right side of the page. There are many more advanced settings available in AirPort Utility 5.6 as well...that are not available on 6.0.
But, you don't have to install AirPort Utility 5.6 if you don't want to. I suggested it because it offers more features and will also look exactly the same as the AirPort Utility that you have used previously.
If your AirPort Extreme is in Bridge Mode, this indicates that you have another device...probably a modem/router....which is acting as the main router on your network. Bridge Mode is the correct setting for the AirPort Extreme in this case.
If you can post back with the make and model number of your "modem", we can check to confirm.
Unfortunately, the Guest Network cannot be enabled unless you configure the AirPort Extreme to be the "main" router on your network, which is likely not possible. If you try to configure the AirPort Exteme otherwise, you will receive error messages and the network will not function correctly.

Private network OK, guest network no IP

Hi Community -
Just installed our new AirPort Extreme, went very well. The private network (using W2PA Personal) works great. Devices can connect to the guest network (WPA2 Personal), but do not acquire an IP. Router is a SonicWall TZ 215. Any thoughts or similar experiences much appreciated!
Thanks to all -
HMKCentral

The guest network does not work when the airport is in bridge mode.. you can put in the details.. but it cannot get working access to main router for secondary vlan.
If you really want this to work, look at the details in threads where people have used a managed switch to provide the necessary vlan requirement. TZ215 should have that level of control.
I have tracked this issue for a while.
Guest network in bridge.
https://discussions.apple.com/thread/2815541?start=15&tstart=0
https://discussions.apple.com/thread/3617532
https://discussions.apple.com/thread/5247107?start=0&tstart=0
https://discussions.apple.com/thread/4787934?start=45&tstart=0
https://discussions.apple.com/message/23127620#23127620

Guest Network not working in latest Airport Extreme

Just bought the latest Airport Extreme (802.11ac), and want to enable the Guest Network.
- Installed latest firmware
- Set Airport in Bridge Mode
- Enabled Wireless Network
- Enabled Guest Network
There is no connecting to Guest Network (iphone) and if possible (macbook) there is no internet.
With a previous version of Time Capsule, the Guest Network in the same setting worked like a charm.
Anybody seen this before or is the Airport Extreme working different than a Time Capsule?

According to the theory what you are saying about the A1355 is not possible.. ie there is no guest in bridge.. I have tested it and can assure you it did NOT work.. it fooled me into thinking it should and I spent many hours working on it.. our forum expert here.. Bob Timmons set me straight.
Now I am always a believer in voodoo and gremlins and maybe the tooth fairy when it comes to wireless.. it is about 80% of the above and 20% science.. so please do the test again and see if it is possible.. but I can assure you.. apple have set guest network to off in bridge.
There are ways around it.. complicated methods. ie if you extend wireless to your TC.. from another apple router where the router is on, then guest can be used. You can also use a managed switch to set vlans for the guest.
See the following which I used to research this topic.
Guest network in bridge.
https://discussions.apple.com/thread/2815541?start=15&tstart=0
https://discussions.apple.com/thread/3617532
https://discussions.apple.com/thread/5247107?start=0&tstart=0
https://discussions.apple.com/thread/4787934?start=45&tstart=0
https://discussions.apple.com/message/23127620#23127620
Good Luck.. !!

Problems with Bridge Mode - Please advise.

Folks I have my Time Capsule on our network in bridge mode to use it as a switch and wireless access point. Internet connectivity seems to keep having problems and I am not sure if my setup makes sense:
My Setup: Netgear DGN3500 Router (modem built in) ->Time Capsule (in bridge mode via ethernet) -> Network devices
Problems:
- Time Capsule TCP/IP has 169.xxx.xx.xx IP Address using DHCP, subnet is wrong (missing one "255" set) , router address is correct
- Netgear router sees Time Capsule connected with a proper IP address (192.168.1.xxx) in routing table
- flashing amber light due to airport not having a valid IP address even though I turned wireless off temporarily for the purposes of trouble shooting. I first just want to get ethernet working correctly
I've reset my router, the Time Capsule all settings, renewed DHCP Lease in Time Capsule...all the standard fanfare.
Any ideas folks or is this thing just done?
Tesserax if you're out there, please respond. I think you've addressed this as well, but I have no solution.

If my router is the DHCP server and my TC is in bridge mode (accepting DHCP info) shouldn't my TC be getting 192.xxx.x.xxx numbers and same subnet mask?
Yes. Have you power cycled the entire network as a troubleshooting step in this regard? If not, power everything down on the entire network, order is not important.
Start your modem first and let it run a moment by itself, then start the next router connected to the modem the same way. Start the Time Capsule the same way. Continue starting devices one a time the same way until the entire network is powered back up.
Additionally, if the TC is in bridge mode, can it serve other devices through the other LAN ports?
Yes. In bridge mode the ethernet ports are acting like a simple ethernet switch. Since they all behave like LAN ports in this configuration, try a different port on the Time Capsule for your connection from the switch to see if that helps.
I suppose I could tell my netgear to only give a range of addresses and the TC another range, but I didn't think I'd have to go through all of that.
I would not recommend that you do this. Even if you are able to avoid IP address conflicts, you'll have a Double NAT error on the network, at best slowing communications down. At worst, devices on one sub net will not be able to communicate with devices on the other sub net.
By the way I forgot to mention one part of my network - the switch (not the LAN one built into my netgear router). There's a 24-port
As a troubleshooting step, try bypassing the switch to see if that makes any difference in the performance of the TC. I like Netgear switches and have used them for years, but I've also had an occasional failure in several of their ethernet switches. It does happen.
Message was edited by: Bob Timmons

Airport Express knocks out internet connection in bridge mode

I have an Airport Extremem (one of the first 'N' versions) and an older (also 'N') Airport Express that extends my network in bridge mode. I want to add another Airport Express (also an older 'N' version) in bridge mode. The new one can be connected in client mode successfully, but when I try to connect it in bridge mode I lose my internet connection. Both of the Airport Expresses are the older model that hang directly on the power outlet and everything has the latest firmware version. Any ideas?
Thanks!

The new one can be connected in client mode successfully, but when I try to connect it in bridge mode I lose my internet connection.
Client mode is also Bridge Mode, so I am not sure what you are referring to here.
In other words, when the Express is in the "join" mode, that is client mode which is also Bridge Mode.
When the Express is in "extend" mode, it is also in Bridge Mode.
So, the AirPort Extreme is operating correctly, correct?
If yes, does the first AirPort Express extend the network wirelessly, or is it connected to the AirPort Extreme using a wired Ethernet connection?
Once we understand the relationship between the AirPort Extreme and AirPort Express, we can tackle the issue of your second AirPort Express.
BTW, the second Express cannot extend the signal from the first Express wirelessly, if that is what you are asking about here?

How can I set up a guest access point with a Time Capsule and an Airport Extreme? I am using a Telus router with the Time Capsule used as a wireless access point (bridge mode). I don't want the guest access point to have access to my network.

How can I set up a guest access point with a Time Capsule and an Airport Extreme? I am using a Telus router with the Time Capsule used as a wireless access point (bridge mode). I don't want the guest access point to have access to my network.

The Guest Network function of the Time Capsule and AirPort Extreme cannot be enabled when the device is in Bridge Mode. Unfortunately, with another router...the Telus...upstream on your network, Bridge Mode is indicated as the correct setting for all other routers on the network.
If you can replace the Telus gateway with a simple modem (that performs no routing functions), you should be able to configure either the Time Capsule or the AirPort Extreme....whichever is connected to the modem....to provide a Guest Network.

Using an airport extreme in both bridged mode and guest network with DHCP

I currently use a third-generation airport extreme in bridge mode to connect my various Mac servers To the Internet. I'm using bridge mode on the AirPort Extreme because I have up to five static IP address (only using three now) I am currently not using the wireless network, and none of the servers are serving DHCP. I am looking at the Newer airport extreme with guest network Wi-Fi. My question is, does the new airport extreme base station support bridge- mode for any devices and host DHCP for the guest network connecting wirelessly to the base station?

The AirPort Extreme cannot be in Bridge Mode and support a Guest Network.
The AirPort must be configured to provide DHCP and NAT services if you want to enable the Guest Network function.
If you really do have a 3rd Gen AirPort Extreme, it will support the Guest Network feature if you connect the AirPort directly to a simple modem.....not a modem/router or gateway type of devices.......and configure the AirPort to provide DHCP and NAT services for the network.

Bridge or Nat mode with guest networks

Hi,
I have my new TC configured in NAT and DCHP mode because that is the only way that i can have the guest network working and also because I can use correctly de feature back to my mac. But i have the warning "double NAT" in my TC (I have a router from my isp which I turn off only the wireless service)? What do you suggest? Ignore de warning or is there anyway that i can put de TC in bridge mode and have guest network and back to my mac Working?
Thanks

While Double NAT is not desireable on a network, as you have discovered it is the only way for you to enable the Guest Network function and possibly other functions that you might need with your current modem/router.
Ideally, you would have a simple modem....not a modem/router.....which would allow the Time Capsule to be configured to provide DHCP and NAT services without producing the Double NAT error.
If the Double NAT is not producing any ill effects......normally Internet browsing will slow a bit and you may not be able to access some websites among other things......then there is an option in AirPort Utility to "ignore" the error and the TC will display a green light.

Guest Network in Bridged Mode?

Similar Messages

Maybe you are looking for