Help setting up a private and guest network

If someone could help me out here it would be appreciated. Here's the deal. I have AT&T U-verse and a 2Wire modem (3801HGV). What I'm looking to do is set up a private wireless network (to access all our computers/NAS/etc) and a guest network (which only has access to the public internet...for guests/co-workers). Unfortunately, the AT&T router doesn't have a guest network feature. So, doing a little research, I decided to buy an Airport Extreme because of its guest network feature. Upon setting that up, the Airport Extreme asks me to go into bridge mode which automatically shuts off the guest network. I thought maybe I could use an Airport Express to setup an additional wireless network that DIDN'T have access to the private network but unfortunately, it sees all the private stuff (it also wants to be in bridge mode).
Can anyone think of a solution for this?

Yeah, I tried this but unfortunately it didn't work
Was there a particular error message that you received?
Or was it a case of the 2-Wire not wanting to see a Double NAT situation on the network?
I can make this work with an AirPort Express using another Apple router as the "main" router, but I don't have a 2-Wire to test things out. By "work", I mean that computers on the AirPort Express network cannot "see" any of the devices on the "main" network.
If you are interested, I'll provide some details on the setup of the AirPort Express for you.

Similar Messages

Can Airport Express extend the private and guest networks simultaneously?

Can the Airport Express be used to extend the private and guest WiFi networks coming from the base station simultaneously, or can it only be an extension for one of the two at a given time?
Joe

Can the Airport Express be used to extend the private and guest WiFi networks coming from the base station simultaneously
Yes, either by a wireless connection or Ethernet connection to the base station.....assuming that both the base station and extender are using firmware 7.6.3 or higher and AirPort Utility 6.3 is used to configure both AirPorts, which must be dual band models.

Is this type of set-up possible - private and public network with Airport

We have an office network with Airport. We have internet with a cable modem with routers plugged to it. The network is not now shared with anyone outside the business.
But would it be possible to add a public component to our setup that would give others access to the internet but never, never, never allow them to enter/see/ mess with the private side?
Tim

Sorry to intrude, I came across this thread while I was looking for some other information and thought that there needed to be a point of clearification to identify some major security vulnerabilities.
With the current config, Cable Modem->Wan port of Router A->Router B plugged into LAN port on Router A
1. Traffic from Router A would see all traffic sent from router B out to the internet, if I was able to sniff the traffic on router A then I would see everything that router B was passing to the internet...not good idea if Router A is public, (traffic would not be encrypted since this is a hard line pass to the cable modem).
2. Router A will always be able to see the interface of router B (have to have it this way to perform the passing of IP traffic from one router to the other.) This means that router B will be open for brute force login attempts and any other vulnerabilities that the router might carry, again since this is being accessed from a publicly accessible network it would be hard to stop from happening in todays world.
3. Router B subnet - If you NAT all the IP's behind router A on it's on subnet (which would include Router B). Uunless router B truly has two interfaces (internal and external) you would not be able to use different subnets and expect to pass traffic all the way to the cable modem because it would not know how to get there.
Again, this post is not meant to cause annomosity, it is to help educate.
I personally think that the safer bet is to get a second hi-speed connection, physical seperation in this case is the best way to go, saves you the worry of getting attacked or snooped on, and keeps your private information safe from the public...unless that is something that you are willing to risk sharing.

Timed Access controlling Main and Guest Network

I have a Time Capusle 4G running software v7.5.2. I am running a Guest Network as well as a closed network.
In the Timed Access window i have default set to "no access". Then, all the computers that are allowed access to the main network are on the list. My guest network is broadcasting but when a user tries to connect to it, they get an "Unable to connect" message. If I change the default access in Timed Access to "Everyday", users are then able to connect to the Guest network again.
Obviously, this is a bug/missing feature and has been for several software revisions. I don't want people accessing the main network that aren't on the timed access list. However, I still want guest users to access the Guest Network, without using MAC address filtering on the Guest Network.
It looks to me that the Timed Access window is controlling the restriction of the Guest and Main network. Which renders the Guest Network feature pretty much useless.
Hopefully this will be addressed in the near future. If other people are experiencing this problem, Please let me know.
-Ghost

It looks to me that the Timed Access window is controlling the restriction of the Guest and Main network.
Your observation is correct. Access control using Timed Access is an ALL or NOTHING feature for both the Main and Guest networks. The Guest network is basically a VLAN function.

Extend both main and guest networks with a 2nd Time Capsule?

I have a 4th generation 2TB Time Capsule set up to broadcast primary and guest networks. I am running out of storage. I would like to increase my storage and I would also like to extend both primary and guest networks.
I currently use an older Linksys router (WRT330N) operating in bridge mode (wired connection to the TC) to extend the primary network, but it does not extend the guest network.
If I purchase a second (5th generation) Time Capsule to replace the Linksys, can it be set up to extend both the primary and guest networks?
From searching the forum, it appears not, but I'd like to confirm. Is true for both both wireless and cabled range extension options?
If I'm not able to extend the guest network this way, I'm inclined to settle for extending the primary network as I currently do and look for other ways to increase my network storage capacity (e.g. by upgrading the drive in my existing TC).

If I purchase a second (5th generation) Time Capsule to replace the Linksys, can it be set up to extend both the primary and guest networks?
Yes, either using wireless or an Ethernet connection between the two Time Capsules, providing that the 4th Gen Time Capsule is running at least firmware version 7.6.3.
A wired Ethernet connection between the two Time Capsules is highly recommended. If you plan to extend using wireless, the second Time Capsule will need to be located where it can receive a very good signal from the first.

Opening hotmail: Please refresh your browser window, When you access your Windows Live Hotmail account from more than one computer, we ask you to sign in again to help keep your account private and secure . Refreshed but no change. in Safari no problem

opening hotmail in firefox: Please refresh your browser window, When you access your Windows Live Hotmail account from more than one computer, we ask you to sign in again to help keep your account private and secure . Refreshed but no change. in Safari no problem

Go to '''Options '''on Firefox Browser-->'''Advanced'''-->''Click on'' '''Network '''tab-->''Select '''''Settings'''-->''Select '''''Use System Proxy Settings
'''

Extending Time Capsule primary and guest networks with 2nd Time Capsule

Hi
I have two Time Capsules. The first is configured to run a primary and guest network. It is connected to an ADSL modem. All of this works fine.
The second Time Capsule is cable connected to the first, in a 2nd location (a next door building).
I want the 2nd Time Capsule to extend _both_ primary and secondary networks in its location.
How do I configure the 2nd Time Capsule (and the first if there is anything I have to do there to get this to work).
Please! and thanks...
Graham

Sorry, but the Guest network cannot be extended either through wireless or Ethernet.
If you would like to see this feature in a future product, you might want to let Apple know
Apple - Time Capsule - Feedback

How To: Setting up two WLANs (Private and Guest) - two distinct IP schemes.

WLC 2504 running software version 7.4.100.0.
Goal:
Private WLAN to allow access to internal network
Guest WLAN to allow access to web (in the DMZ)
We currently have the wifi-network running and is servicing web access only.
Any ideas on how best to go about this? There will be need to assign two different IPs to wireless clients depending on which WLAN they access.
Thanks.

Hello Daniel,
So in order to segregate traffic based on the WLAN they are connecting to, you will first need to establish/create dynamic interfaces on your controller which will be 'mapped' to a specific SSID(ie. Private or Guest):
http://www.cisco.com/en/US/docs/wireless/controller/7.4/configuration/guides/consolidated/b_cg74_CONSOLIDATED_chapter_011111.html#ID594
If you already have the dynamic interfaces in place, you simply just create the WLAN under WLANs > Create New > Go. Once you apply, you will be sent to the 'General' section where you can apply the 'Interface' to the dynamic interface you created in which to put the client on.
Cheers,
Erwin
How helpful was I? Don't forget to rate me when you have the chance!

Cascading EA4500s and Guest Network access

Hi, I hope esomone can help me here. I've got two EA4500 routers connected via ethernet. The primary router has DHCP enabled and the secondary has it disabled. IP address of primary is 192.168.1.1 and the secondary is 192.168.1.2.
I have set up guest access on both routers however only the primary router allows users to connect. When out of range of the primary router but in range of the secondary router the network is visible but when you try to connect to it, it only gives limited or no connectivity message and can't connect to the internet.
Is it possible for the guest network access to follow the same pattern as the secure network, i.e. the same network throughout the house?
Regards
Jon

Cascading two routers should have correct parameters set. For instance, the Ethernet port of the secondary router should be connected to the ethernet port of the primary one, and the DHCP should be disabled on the second router. The ip address you've set are correct for the both routers. This thing shoud be done if the connection is LAN to LAN.
By the way there are two types of cascading: Click here for info!
For the Guest Network:
Guest Network would only work if the the DHCP is enabled on your router. It means to say that on the type of setup you're doing which is LAN to LAN (DHCP disabled on the second router), Guest network would not work on the secondary router. If the connection is LAN to WAN, then both of the router should have Guest Network working.

Wired + Private Wireless + Guest Networks

I'm attempting to setup a configuration that I don't seem able to get correct. I have a small wired network at my church with a file server and a couple of dozen users, some of which have laptops and would like to be able to roam wirelessly through the building. In addition, I would like to have an unsecured wireless guest network for visitors which provides access to the internet and does not have access to the file server.
The specifics are a wired 192.168.1.xxx network with a NAT'd DSL modem/router. I have 4 Airport Extreme dual radio N devices. I've tried setting the first Airport Extreme unit to shared IP, the only setting that allows me to also use a guest network, with a private SSID handing out 172.0.xxx.xxx addresses and a guest network handing out 10.0.xxx.xxx addresses. It seems logical to me that I would want to used bridged mode to allow my private wireless uses to see the server, but the Airport Extreme tells me I can not use a guest network with that setting.
With this setup, I can not get to my server by name, but I can get to by IP address. I guess that's not a huge problem since I have such a small number of users, I can add the server IP address to a hosts file on each client. What bothers me most is that I can get to the server IP from the guest network as well as the private network. Am I missing something?
My second point of confusion is when I try to configure the other 3 Airport Extremes to extend the network. The configuration tools asks me which wireless network I want to extend, and allows me to choose only the private network OR the guest network. I thought it should be able to extend both networks simultaneously. Am I mistaken on this as well?
I'm certain I've left out plenty of information you may need to assist so please ask, I will gather what ever I can. Thanks in advance.

Hello muellgre. Welcome to the Apple Discussions!
Unfortunately, Apple does not provide you with very many options when it comes to their Guest network feature. It is basically designed to work with a single AirPort/Time Capsule router in your network configuration.
As you have found out, it will only be available if you have the AirPort configured as a NAT router and not as a bridge. Also you cannot extend a Guest network. I'm actually surprised that you were given this option.
Since you have a DSL gateway upstream of your AirPorts that is performing as your primary Internet router, you would want all of your AirPorts to be configured as bridges. Regardless if you were connecting them all back to the DSL gateway by Ethernet or creating a WDS extended network.
If you go the route of configuring a single Extreme as a router, you will have a Double NAT configuration, which is not bad in itself, but does add some complexity when attempting to share between network segments.
One option would be to reconfigure the DSL gateway as a bridge, and then, configure one of the Extremes as a router to allow it to handle NAT & DHCP services for the network. This will also give you your guest network. You can also extend this Extreme with the others, but not its guest network ... so, overall, this might not satisfy all of your networking requirements.

ADSL Broadband with Secure private and Guest Open ...

Hi
Im thinking of signing up with BT for my business phone and broadband - not the cheapest (£55/month) but the one I feel comfortable with (for now).
I shall need to have a private wi-fi network for my business computers but also a public (possibly open) wi-fi network for client use.
Ive got a Home Hub 3 for my house but Im not overly impressed with it and dont know if that would give me what I need anyway?
So, can anyone suggest a GOOD router which will connect with BT ASDL line, and give me 1 secure private wi-fi channel (plus ethernet connection) and at least 1 (maybe more) open wi-fi channels ?
Im looking at upto £150 to spend on a piece of kit to do the job.
I believe there is also some software which will allow me to set a "welcome page" on the open network(s) as well ?
THANK YOU for any advice !

Welcome to the BT Residential Customers forum
You would be best asking for advice on the BT Business forums http://business.forums.bt.com/
as there are probably plenty of people with a similar arrangement.
Thanks
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Airport express and guest network

My operatign system is OS X 10.9.1
Airport Express Time capsule 1 TB
I have had my airport express time capsule for 2 years (1 TB)and it worked pretty near flawlessly since then. It started with the time capsule being too full and that got me messsing with it.
I could not fugure out how to delete files and it was not writing over old ones. I have seen the same problem on here already. (In the end I bought an external drive and now that seems to have solved it, even though I deleted a bunch of old files and my compute is now hovering around 830 MB it still won't back up on the time capsule. I am not too worried about this though. If you can help me on this part that is great. )
Then I tried to reset my AE device. WIth that I had to reset my guest network. this is where the problems began.
Previously my AE had a steady green light and hosted two wifi names (mine and for guests).
Now if I click not bridged (?) then I can not get Internet access on the guest network. If I click DHC and Nat it constantly blinks amber but the guest network is not there (even though I set it up). I have gone back and forth with this and it is consistently behaving like I described above.
I have done a reset. I have done a reset and unplugged the machine (though I admit I did not wait two minutes, closer to 45 seconds)
I want to go back to the steady green light and the two wifis established.
Can you please help me?

Also one more thing to add. My Server name has disappeared too. I get an error message that says
There was a problem connecting to the server "name"
The server may not exist or it is unavailable at this time. Check the server name or IP address, check your network connection, then try again.
Seems I did a great job messing with this today.
Merry Christmas!

Wireless and guest network and HREAP

Hi,
I have inherited a wireless infrastructure which comprises of a head office with WCS and WLC plus LWAPP access points.
There is a sub office in another town who wishes to deploy a wireless infrastrucure and it struck me that as they only want to deploy a couple of AP's that HREAP would be good to use in this senario.
However they want to also use the guest wireless network that we have in the head office but I dont want their guest traffic to come to our DSL modem that we have set up for the HO guest wireless. The two offices are connected via an MPLS link which doesnt need anymore traffic on it.
Is there a way of configuring the HREAP and the WLC and WCS so that the sub office breaks out locally for guest and yet the lobby admin at HO can control the password?
Many thanks,

Hi Nell,
the feature you are looking for is "H-REAP local switching".
So you can set the remote AP to H-REAP mode (which optimizes it for "behind a WAN link") and from there you can set several ssids as "local switching".
this means that everything about the authentication phase is handled by WLC but after authentication, the traffic is dropped locally at the AP and doesn't transit through the WLC.
The guest SSID has to be enabled for local switching and then, on the H-REAP APs, go in the AP configuration (from WLC "wireless" tab, then click on ap) and in the hreap tab, you can configure the vlan where the guest traffic will be dropped on the remote site. It must be a vlan that exists on the remote site and users will get a DHCP address on that vlan.
Regards,
Nicolas

Shared Printers and Guest Networks

I have an Airport Extreme with an HP 990cxi printer connected to the USB port. I have the printer shared. My AE is configured to Create a Wireless Network". It is also configured to create a Guest Network.
As it stands, someone connected to the Guest Network cannot print. Is it possible to give someone access to the printer w/o giving them access to the private network? If not, what would I have to do to limit their access to my private network and what would they have access to?

I would delete and re-add the printer.
If that doesn't work, try resetting the printing system and re-add the printer. In the Print & Fax system prefs, ctrl-click on the printer list and select Reset Printing System.

Is it possible to extend AP Extreme's both main and guest networks by connecting one or two new dual band AP express in roaming mode (connecting with ethernet)?

I have an Airport extreme base station which creates a wireless network and a guest network at my home. Neither of them reach every room so I have set up one Airport express (1st generation A1264) in roaming mode to extend the main wireless network by connecting the base stations with ethernet (with powerline adapters actually). Works fine with the main network. However, I would like to extend also the guest network. Is this possible with a 2nd generation dual band AP express?

I would like to extend also the guest network. Is this possible with a 2nd generation dual band AP express?
Yes it is, if you have updated your Mac to use AirPort Utility 6.2 and both the AirPort Extreme and AirPort Express have been updated to use version 7.6.3 firmware.

Help setting up a private and guest network

Similar Messages

Maybe you are looking for