Guest network no access

After upgrading to the latest firmware, I cannot access the guest network. When trying to connect from an iphone/ipad/laptop and entering the network password, nothing happens and it keeps on trying to connect... Anybody the same problem? Any solutions?

ok, is there a way to configure the wireless router to *assign* say 10.1.10.50-10.1.10.55 instead of the 192.168.33.xx pool that it wants to use? I could at least then reserve that block on the comcast device. Or since only 5 guests are allowed at a time, map the addresses 192.168.33.1-192.168.33.5 to 10.1.10.51-10.1.10.55? Or maybe add a mac reservation on the comcast device? Any thoughts?
To be clear, DHCP is turned off on the LAN side, not the WAN side (which is why I thnk I'm having the issues)

Similar Messages

How do I configure Guest network to access ethernet wired printer?

I have a wired/wireless network with a new dual band AEBS. The AEBS is connected to a Cisco router, which in turn sends it's connections to various wall-plates in our home. One HP 4110 printer is wired via it's ethernet port, one Mac Mini (OS 10.6.2) is hard wired also. The dual band AEBS 5 GHz network is used for our newer laptops, and the 2.4 GHz network is used for a G3 Firewire PowerBook (now don't make fun... it was the best there was at one time) running OS 10.4.11.
The PowerBook cannot access the printer that is hard wired via ethernet cable to the network. How do I get the PowerBook on the "Guest" network to access the printer?
I tried searching these discussions, but can't find an answer to my specific issue. Any help is appreciated.

Since you have a simultaneous dual-band AEBS, why not connect your PowerBook G3 to the non-Guest 2.4 GHz network created?
Can I take an AEBS that is a couple of years older (I have a couple of the flying saucers around here somewhere), wire that to an available ethernet port on the LAN, and then connect the older PowerBook G3 to that older AEBS wirelessly?
Sure
If so, will that arrangement slow down the entire system?
No
If that won't work, and I connect the PowerBook G3 directly to an ethernet port, will that slow down the other wireless computers?
Yes you can connect your PowerBook G3 via Ethernet. That would have no effect on the wireless computers.

How to setup the guest network just access internet only (not touch in internal server)

I had setup the AirPort Extreme in basic and guest network, but observed the guest can access to our server currently, for the security issue, we can setup the guest network to access internet only? pleae advice and thanks

By default, a properly configured Guest network on the AirPort Extreme only allows network clients to access the Internet. No access to the "main" network's resources should be available.
This is assuming that the AirPort Extreme is the only or "main" router in your current network configuration.

Guest Network & WAN access ... Why?

Just bought a TC. Everything works great. 5Ghz network, regular 2.4 Ghz network, but the guest network has me a little nervous. It functions however if you are on it and load up Airport Utility, you have full access to the TC.
I want to use Setup Over WAN for use on the regular networks but I don't want Guests to have access... Am I doing something wrong or is this a case of "It's just the way it is"?
Thanks

Welcome to the discussions, dw1985!
but the guest network has me a little nervous.
We had a chance to test out the Guest network feature recently when my sister was visiting and using her MacBook to connect to the "Guest" network here.
She could only connect to the Internet and was not able to "see" any of the other devices on the main network, such as other computers, Time Capsule, etc.
Since you are taking bandwidth away from the main network when you enable the guest network, you might want to turn the "guest" network on only when you have "guests".
I did not test the setup over WAN, so can't comment on that but would point out that when you do this, you are connecting to the Time Capsule from a remote location over the Internet. If you don't need this capability, you might want to disable that function.
Message was edited by: Bob Timmons

Guest Network access

Hello,
Im trying to setup access for our guests to go out a specific interface/ISP
We have our main connection to our datacenter.
We also have a little SAT Receiver that we get internet from (10MB).
I want a specific vlan to go out ONLY to that SAT Receiver connection. Here is my setup:
Guest Network
vlan 216
name WIFI-Guests
SAT Receiver
interface Vlan70
ip address 192.168.151.2 255.255.255.0
interface Vlan216
description Guest WIFI
ip address 10.2.16.1 255.255.255.0
ip helper-address 10.2.1.26
Can this be done via vrf, and how? Or is there an easier way?
Thanks...

Just noticed that you are using an ip helper-address which means you won't be able to use a VRF effectively as your guest network needs access to the vlan with the DHCP server in it.
Assuming you want to keep DHCP for this network on the DHCP server then probably PBR is better ie.
access-list 101 permit udp any any eq bootps log
access-list 102 permit ip 10.2.16.0 0.0.0.255 any
route-map PBR permit 10
match ip address 101
route-map PBR permit 20
match ip address 102
set ip next-hop
int vlan 216
ip policy route-map PBR
note that with the above the first acl has to allow DHCP to get through to the DHCP server. Normally with PBR you would simply use just the one acl eg.
access-list 101 deny udp any any eq bootps
access-list 101 permit ip 10.2.16.0 0.0.0.255 any
but with the 3750 (and some other switches) if you use deny lines in the acl this can cause CPU issues on the switch. So a different acl is used for each PBR entry. The first PBR permit entry uses acl 101 and simply matches DHCP traffic and does nothing so it is routed normally. The second PBR permit statement uses acl 102 and matches all other traffic ie. internet and sends it to the SAT device.
Also worth saying that all traffic is sent to the SAT device but you should also apply an acl on the SVI for vlan 216 to stop traffic from vlan 216 clients to other vlans. The PBR would send this to the SAT device anyway but the SAT device might then route it back to the switch which you don't want. So your acl would look like -
access-list 103 permit udp any any eq bootps
access-list 103 deny ip 10.2.16.0 0.0.0.255
etc. for each internal subnet
access-list 103 permit ip 10.2.16.0 0.0.0.255 any
int vlan 216
ip access-group 103 in
Hope all that makes sense. If not please come back with any questions you have.
Jon

Wireless Guest network config question

Hello,
I have installed SAP2602I access points at my customers location and configured a corporate network and a guest network. Everything works fine except when a user is connected to the guest network, they cannot access a web server that is hosted internally. Users on the guest network can access any other web-site fine, just not the one hosted by this same company on a local machine. This locally hosted web-site can be accessed by users from the Internet just fine.
I am guessing there is an issue with routing but I am not sure what, any ideas?
Thanks,
Mitchell Smith
North Texas Networks

Hi Steve,
Thanks for your reply. I am sure the problem is a hair pinning issue as the firewall config does not allow connections to the outside address from internal clients.
Can you give me a sample config to make this work? Is it just a firewall mod or more than that?
Thanks,
Mitchell

Airport Extreme 802.11AC + 5th Gen and guest network access

I have the current gen Airport Extreme 802.11AC with a 5th Gen extending the network. With this setup, I am unable to login using our guest network setup. I have tried using guest network with a password and one without but its the same results. When a guest logins, it stuck attempting to login with no error messages.
So is it possible to have this configuration and still have guest network access?

Please review what I said originally.......that the guest network function on the AirPort Extreme is designed to work with a simple modem......so the AirPort acts as the main router for the network..
Another way of saying the same thing is that the AirPort needs to be "in charge" of your network for the guest feature to work correctly. The AirPort cannot be in charge if it is connected to another device that is already configured to be the main router on your network.....your Actiontec modem/router.
The Actiontec device combines the functions of a separate modem and a separate router in one package. This type of device is known as a modem/router, or also known as a gateway.
Some folks call a modem/router or a gateway......a modem. So, things can get confusing.
I do not know if it is possible for the Actiontec device that you have to be configured to act as a simple modem.....so the routing functions of the device are completely turned off. (Turning off the wireless on the Actiotec does not turn off the routing function).
If you turn off the wireless on the Actionec, it becomes a modem and a wired router. And that wired router is still in charge of your network.
The guest network feature will not work correctly unless the AirPort is in charge of your network.
My suggestion was for you to ask your Internet Service Provider (ISP), if they could supply you with a simple modem. That is all that you need. You don't need two routers....and the Actiontec that you have now is not allowing the guest feature to work correctly.

Cascading EA4500s and Guest Network access

Hi, I hope esomone can help me here. I've got two EA4500 routers connected via ethernet. The primary router has DHCP enabled and the secondary has it disabled. IP address of primary is 192.168.1.1 and the secondary is 192.168.1.2.
I have set up guest access on both routers however only the primary router allows users to connect. When out of range of the primary router but in range of the secondary router the network is visible but when you try to connect to it, it only gives limited or no connectivity message and can't connect to the internet.
Is it possible for the guest network access to follow the same pattern as the secure network, i.e. the same network throughout the house?
Regards
Jon

Cascading two routers should have correct parameters set. For instance, the Ethernet port of the secondary router should be connected to the ethernet port of the primary one, and the DHCP should be disabled on the second router. The ip address you've set are correct for the both routers. This thing shoud be done if the connection is LAN to LAN.
By the way there are two types of cascading: Click here for info!
For the Guest Network:
Guest Network would only work if the the DHCP is enabled on your router. It means to say that on the type of setup you're doing which is LAN to LAN (DHCP disabled on the second router), Guest network would not work on the secondary router. If the connection is LAN to WAN, then both of the router should have Guest Network working.

Internet Access Not Available on WAP Guest Network

Hello,
We have the RV180W router and the WAP321 access point in our business. We want to broadcast two SSIDs from both locations: the office SSID, which shares routing to LAN traffic, and a guest SSID.
The office computers are attached via ethernet to a switch off of LAN port 1 on the router. The AP is attached to LAN port 2 on the router.
On the router, the office SSID and the LAN are members of VLAN 1. The guest network is a member of VLAN 2. From the router, everything works just fine.
On the WAP, the staff SSID works fine, but the guest SSID has no internet. Both the office and guest networks get DHCP successfully from the router.
Our VLAN membership table in the router and WAP are attached, as well as other configuration details.
Why would we not be getting internet on the guest ID only on the WAP? Thanks for your help!

Applying specific DNS configurations for VLAN2 and on the AP does not resolve the issue either.
Here's a bit more clarification.
From the router:
Staff network works just fine (IP in subnet 192.168.1.1 is given, internet can be accessed)
Guest network works just fine (IP in subnet 192.168.2.1 is given, internet can be accessed)
From the AP:
Staff network works just fine (IP in subnet 192.168.1.1 is given, internet can be accessed)
Guest network can be accessed with limited connectivity (IP in subnet 192.168.2.1 is given, internet cannot be accessed)
The guest network from the AP is the only oddball. The only thing I can think that seems different is the subnets. For the staff network, we specify that the gateway, DHCP server, and DNS server are all 192.168.1.1, the router. But the guest network, tied to VLAN2, is in the subnet 192.168.2.1. From the router, you can specify that VLAN1 looks at the staff subnet and VLAN2 looks at the guest subnet, but I don't see a way to do this in the AP, it just has the place for one of each of those to be specified (per screenshot ap-ipv4.png).

Limit access to guest network

In reading previous postings on limiting guest wifi access time on the AirPort Extreme, it sounds like you have to identify certain devices. my kids' devices only have access to the guest network. I was curious as to why the capability doesn't exist to limit the network availability period vs blocking specific devices. For instances, if my tween daughter has friends sleeping over, I don't want to just limit her access after a certain time, I'd like to limit all the kids' access By switching off the guest wifi.
any help is greatly appreciated!
thx, Sliceback

Apple did not provide the ability to do it.. you can turn off wireless manually but there is no other ability.. Apple routers are minimalist as many Apple designs are.. they do not provide more than absolute basic usage for stable family with no body cheating or ill using the network.. hence no firewall, no QoS, no logs, no snmp in new models. in fact as time goes on.. Apple is continuing to remove functionality rather than add it. That is their design philosophy.. if that doesn't work for you buy a wireless router with controls.. !! Most decent routers now have excellent controls, time limits and multiple guests.. check out the Asus line. eg AC68U.
Or use a cheap router with gargoyle firmware.. you can keep the AE as a wireless AP.. it is about as good as it gets.

Timed Access controlling Main and Guest Network

I have a Time Capusle 4G running software v7.5.2. I am running a Guest Network as well as a closed network.
In the Timed Access window i have default set to "no access". Then, all the computers that are allowed access to the main network are on the list. My guest network is broadcasting but when a user tries to connect to it, they get an "Unable to connect" message. If I change the default access in Timed Access to "Everyday", users are then able to connect to the Guest network again.
Obviously, this is a bug/missing feature and has been for several software revisions. I don't want people accessing the main network that aren't on the timed access list. However, I still want guest users to access the Guest Network, without using MAC address filtering on the Guest Network.
It looks to me that the Timed Access window is controlling the restriction of the Guest and Main network. Which renders the Guest Network feature pretty much useless.
Hopefully this will be addressed in the near future. If other people are experiencing this problem, Please let me know.
-Ghost

It looks to me that the Timed Access window is controlling the restriction of the Guest and Main network.
Your observation is correct. Access control using Timed Access is an ALL or NOTHING feature for both the Main and Guest networks. The Guest network is basically a VLAN function.

Guest Network Access via Lan Port

I bought two of the new Apple Airport Expresses and have the Wireless working just great. I have the second one as an extender also working just as I need it to work. But is there a way to use the LAN port on either of the the units (either the Primary Access Point or the Extended one) to allow someone to connect their computer or other device via hardwire but join as a Guest Participant (so they're segregated from the rest of the network)?
Or is there a way I can connect the device to the LAN port, assign it an IP Address and then use some of the advanced tools to block it from everything else on the network except for using the internet?

No, sorry but the Guest Network cannot be extended either by wireless or Ethernet.
is there a way I can connect the device to the LAN port, assign it an IP Address and then use some of the advanced tools to block it from everything else on the network except for using the internet?
No, this is not possible with the AirPort routers.

My guests does not get internet access through my guest network

I have created a guest network on my time machine. The problem is that my guests don´t get internet access when they choose the network and type the password. I don´t understand why this is happening? My ordinary network is fully functional.

If you are using 7.6.3 firmware on the TC, the guest network does not actually work in bridge mode.. it looks like it does.. but nope, it doesn't.
Make sure the TC is the main router in the network.

Unable to have my dell laptop and a Nook Reader access my Apple Extreme Guest network

I have an AE base station (DHCP) to which my Dell desktop (windows Vista) is connected wirelessly via guest network (WPA2). However, both my newer dell laptop (Windows 7) and a Nook Reader cannot. They both see the guest network in the list of available networks but somehow they cannot access the guest network. I have an Imac and an ipad that use the primary network with no problem. Is there a specific setting I have to have on the AE base station? Thanks, any help would be appreciated!
Jojo

Have you gone into the Iphone extreme app and set up a passcode for the guest network AND also set it up as a WPA2 encription. I beleive BOTH the main passcode and guestpasscode have to be the same security setting ( WPA/WPA2 personal OR just WPA2 personal.

IPhone5 can access guest network without password

I have just finished setting up the Cisco Valet M20 and tried to access the "guest network" using password. All devices connected to "guest network" were taken to a login screen for a password. All except the iPhone5. The phone was able to have connect wirelessly without having to go to the login screen and enter the guest password. I have tried changing "guest network's" password and resetting the network configuration of my iPhone5, still the same result. My laptop, iPad and andriod phone did go through the login screen for password. Is there a fix to this problem?

Since other wireless devices were working thru the guest network as they should, I believe it has something to do with the IPhone5. How about you try this workaround: disable the guest network, turn the M20 off for 10-15 seconds, once you power it back on, access the cisco connect software again and enable the guest network. On your iphone, try to reset the network settings again then try to connect to the guest network.

Guest network no access

Similar Messages

Maybe you are looking for