Is this type of set-up possible - private and public network with Airport

We have an office network with Airport. We have internet with a cable modem with routers plugged to it. The network is not now shared with anyone outside the business.
But would it be possible to add a public component to our setup that would give others access to the internet but never, never, never allow them to enter/see/ mess with the private side?
Tim

Sorry to intrude, I came across this thread while I was looking for some other information and thought that there needed to be a point of clearification to identify some major security vulnerabilities.
With the current config, Cable Modem->Wan port of Router A->Router B plugged into LAN port on Router A
1. Traffic from Router A would see all traffic sent from router B out to the internet, if I was able to sniff the traffic on router A then I would see everything that router B was passing to the internet...not good idea if Router A is public, (traffic would not be encrypted since this is a hard line pass to the cable modem).
2. Router A will always be able to see the interface of router B (have to have it this way to perform the passing of IP traffic from one router to the other.) This means that router B will be open for brute force login attempts and any other vulnerabilities that the router might carry, again since this is being accessed from a publicly accessible network it would be hard to stop from happening in todays world.
3. Router B subnet - If you NAT all the IP's behind router A on it's on subnet (which would include Router B). Uunless router B truly has two interfaces (internal and external) you would not be able to use different subnets and expect to pass traffic all the way to the cable modem because it would not know how to get there.
Again, this post is not meant to cause annomosity, it is to help educate.
I personally think that the safer bet is to get a second hi-speed connection, physical seperation in this case is the best way to go, saves you the worry of getting attacked or snooped on, and keeps your private information safe from the public...unless that is something that you are willing to risk sharing.

Similar Messages

Private and Public Networks with DHCP, DNS, AD-DS

Hello, I am a student working on creating a server lab at school and am curious if it is possible to set up a unique testing environment. I will describe what I am trying to achieve below.
I have roughly 15 servers inside of my school lab and want to learn some solid skills as I go out into the workforce. The server lab will utilize one server specifically as a AD-DS, DHCP, and DNS Server and another as a TFPT / Terminal Services Server. This
so that I can set up the rest of the servers as a PXE boot environment (This may not be practical in the real world, but want to get some experience with it.) In order to do this I am using a private network that I have created with the networking equipment
I have (Cisco 1800 Series Router, Cisco 2950 Series Switches) inside of the lab, but need to make sure that the servers in the lab can NOT talk to the rest of the world on the school network that will be plugged into the second NIC. This is so that I can download
windows updates from the school network and hopefully apply them through Windows PowerShell (Is this possible?) to the servers in the private lab network.
I am curious if it is possible to set up a AD-DS, DHCP, and DNS server so that it only communicates through one port and not talk to the rest of the world, as well as if it is possible to create a PowerShell script to check for Windows Updates on the school
network, download them, and then distribute them to the servers inside of the lab environment?
Please feel free to ask questions and any help or insight would be appreciated.

What you are attempting to do is quite common. A simple implementation can be done with what can be called a 'jump server'. That server is the only machine in your environment that has access to the internet. You must log into it first
before you have access to your lab environment. It's basically how I set up my lab.
The jump server can also host Windows Server Update Services (WSUS). This is a no-cost capability from Microsoft that can automatically download patches from Microsoft. I then use a group policy in my lab domain to set the update server of my
domain to point at the WSUS server. If fact, this sort of configuration is quite common in corporate environments, too. It ensures that corporate machines are not going out to the internet to download patches, allowing the corporate managers to
download and test the patches to see if they break anything before deploying to the rest of the corporate machines as a whole. So the jump server has one IP address that is routable to the internet and a second network on your lab's domain network.
The jump server does NOT run any routing software, so no machine from the lab can access the external network.
. : | : . : | : . tim

Help setting up a private and guest network

If someone could help me out here it would be appreciated. Here's the deal. I have AT&T U-verse and a 2Wire modem (3801HGV). What I'm looking to do is set up a private wireless network (to access all our computers/NAS/etc) and a guest network (which only has access to the public internet...for guests/co-workers). Unfortunately, the AT&T router doesn't have a guest network feature. So, doing a little research, I decided to buy an Airport Extreme because of its guest network feature. Upon setting that up, the Airport Extreme asks me to go into bridge mode which automatically shuts off the guest network. I thought maybe I could use an Airport Express to setup an additional wireless network that DIDN'T have access to the private network but unfortunately, it sees all the private stuff (it also wants to be in bridge mode).
Can anyone think of a solution for this?

Yeah, I tried this but unfortunately it didn't work
Was there a particular error message that you received?
Or was it a case of the 2-Wire not wanting to see a Double NAT situation on the network?
I can make this work with an AirPort Express using another Apple router as the "main" router, but I don't have a 2-Wire to test things out. By "work", I mean that computers on the AirPort Express network cannot "see" any of the devices on the "main" network.
If you are interested, I'll provide some details on the setup of the AirPort Express for you.

How to get the private and public key?

there is my code,i want to get the public key and the private key �Cbut i could not find the the approprite method to solve the problem.
import java.security.Key;
import javax.crypto.Cipher;
import java.security.KeyPairGenerator;
import java.security.KeyPair;
import java.security.Security;
public class PublicExample {
public static void main(String[] args) throws Exception {
if (args.length != 1) {
System.err.println("Usage:java PublicExample <text>");
System.exit(1);
byte[] plainText = args[0].getBytes("UTF8");
System.out.println("\nStart generating RSA key");
KeyPairGenerator keyGen = KeyPairGenerator.getInstance("RSA");
keyGen.initialize(512);
KeyPair key = keyGen.generateKeyPair();
System.out.println("Finish generating RSA key");
Security.addProvider(new org.bouncycastle.jce.provider.BouncyCastleProvider());
Cipher cipher = Cipher.getInstance("RSA/ECB/PKCS1Padding", "BC");
//System.out.println("\n" + cipher.getProvider().getInfo());
System.out.println("\nStart encryption");
cipher.init(Cipher.ENCRYPT_MODE, key.getPublic());
byte[] cipherText = cipher.doFinal(plainText);
System.out.println("Finish encryption:");
System.out.println(new String(cipherText, "UTF8"));
System.out.println("\nStart decryption");
cipher.init(Cipher.DECRYPT_MODE, key.getPrivate());
/*i want to get the private and public key in this method ,but i found the result was not
the one i expected to get,how to solve the problem?
thanks in advance!
System.out.println("private key:" + key.getPrivate().toString());
System.out.println("public key:" + key.getPublic().toString());
byte[] newPlainText = cipher.doFinal(cipherText);
System.out.println("Finish decryption:");
System.out.println(new String(newPlainText, "UTF8"));
thanks in advance!

System.out.println("private key:" +
" + key.getPrivate().toString());
System.out.println("public key:" +
+ key.getPublic().toString());
key.getPrivate() returns an instance of PrivateKey and key.getPublic() returns an instance of PublicKey. Since PublicKey and PrivateKey are interfaces then they will return one of the concrete implementations. Check out the Javadoc for PublicKey and PrivateKey.
When you know which concreate implemenation you have then you can use the methods on that object (by appropriate casting) to find the information you want.

Can i set up my Time Capsule 1st generation with airport 5.5.3?

can i set up my Time Capsule 1st generation with airport 5.5.3?

Yes, if you are asking about AirPort Utility 5.5.3 for Windows.....and you are running XP SP3 on your PC.
AirPort Utility 5.5.3 for Windows
If you are running XP SP2 on the PC, then you will need to use AirPort Utility 5.4.2 for Windows
AirPort Utility 5.4.2 for Windows

I use macbook and lion os. I want to sync gmail contact with address book. For this i goto preference in address book and select "sync with google". I put my gmail details. However, the sync does not happen. Please help.

i use macbook and lion os 10.7.2.
I want to sync gmail contact with address book.
For this i goto preference in address book and select "sync with google".
I put my gmail details.
However, the sync does not happen.
Please help.

You should have signed in with that address in the first place, but there is a workaround: go to System preferences>Mail, Contacts@ Calendars and add your @me.com address as an account there.

Is it possible to set up a network with airport extreme that is not on the internet

Is it possible to set up a home network using airport extreme that will be a non-internet option? Not connected to the internet wifi.

Is it possible to set up a home network using airport extreme that will be a non-internet option?
Yes
Not connected to the internet wifi.
If the AirPort Exteme is not connected to the Internet, then Internet connections will not be available on wireless or wired connections.

Assosciation private and public

I would like to have some responses from you guys. From OOAD point of view what are the considerations to be kept in mind before making an assosciation private or public.
Any ideas would be welcome

Containment associations will most often be private.
Consider the following:
Class Node is to be kept in a list which Class A manages.
First example.
Class Node is defined as a private inner class of Class A. Class A keeps a list of Nodes using a private instantiation of the ArrayList class. Node is private. The ArrayList is private. So when diagramming it the association is certainly private.
Node is wholly owned and contained by A. If A is deleted then all Nodes are deleted.
In this case one might make the point that because this is entirely private that it implementation rather than design. So it shouldn't be diagrammed at all. But sometimes it is necessary to do this to show how it will meet the needs of the system (or because a junior programmer is doing the coding and you want it to be painfully obvious.)
Second example
Class Node is a public class (not part of Class A.) Class A keeps a list of Nodes using a private instantiation of the ArrayList class. So when diagramming it the association is certainly private.
Again in this case A owns all of the Nodes.
Again the association could be consider an implementation detail (diagram is not necessary.) But because there are now external users, it might be more relevant to detail explicitly that a list of these is being kept.
For the above two examples 'private' might also serve the need of the code generation capability of the two. Neither of the above associations should ever be implemented publicly.
Third example
A variation of the examples above is where the association is to be managed by one or more external systems. If there is one external system then it can own it. But if there is more than one, then the assocation must be public.
In this case it is certainly possible (and likely) that A does not own the Nodes that it is associated with.
Fourth example
If the relationship between A to Node is many to many than the association is always external to A and Node. So unless it is explicitly owned by a single external system it must be public. Never make the mistake of trying to have either class try to own it.
In this case A never owns the Nodes that it is assocated with.

I am setting up time capsule and have issues with DNS

Can't get internet connected and says DNS server not identified

Technicolor TG789vn is a gateway, which is a modem and router in one package. Please verify by checking the Technicolor information on this model below:
http:///en/solutions-services/connected-home/modems-gateways/xdsl-modems-gateway s/tg789vn-bonded
Assuming that things are working correctly, AirPort Utility should be able to set up the Time Capsule correctly with this type of device.
Shut down your Mac and then restart the device.
Power off the Technicolor gateway, wait a minute, then power it back up and let it run a few minutes.
Power up the Time Capsule for a few minutes, then hold in the reset button on the back of the Time Capsule for 8-10 seconds and release. Allow a full minute for the Time Capsule to restart to a slow, blinking amber light status.
Connect an Ethernet cable....that you have tested to make sure that it is working....from one of the LAN <--> ports on the Technicolor gateway to the WAN "O" port on the Time Capsule
On your Mac....open Macintosh HD > Applications > Utilities > AIrPort Utility
Click on Other WiFi Devices
Click on Time Capsule
The setup utility will open up with a configuration window mentioning that the Time Capsule will be set up to create a network
For Network Name......Enter a simple, short name that you want to call your wireless network.
For Base Station.......Enter a simple, short name that you want to call the Time Capsule. Mine is TC, for example
For Password.........Enter a password that will be used for the wireless network and base station
For Verify Password.....Enter the same password to confirm
Click Next
The utility will set up everything for you. When you see the message of Setup Complete, click Done and you should have a green light on the Time Capsule.
Select the wireless network that you created and enter the password to connect. You should be all set.

Set up DynDNS access through existing network with new Airport Extreme

Hey everyone!
I just can't seem to figure out what I am doing wrong here...
I am working with an office network which was initially set up with a Linksys router and a separate Linksys hub connecting two Macs and a network printer in one particular room. We added several new iMacs and for ease of connectivity, decided to add a new Airport Extreme base as one of the new iMacs is acting as a server for a database the other new wireless iMacs connect to. Also, all the machines need access to the connected network printers connected in various parts of the office.
What we have now is the original Linksys router -> Linksys hub -> Airport Extreme. Everything seems to be working fine this way but I do believe that both the Linksys router AND the Airport Extreme are distributing IP addresses, which I'm thinking, could be the problem. I set up a DnyDNS account just fine, assigned port # 8080 on the server iMac and also opened port 8080 on both the Linksys and Airport Extreme. I still cannot get through to the server via DynDNS however.
I am wondering if I should turn off IP distribution on the Airport Extreme and let the Linksys router handle all that? The software that the other wireless iMacs run to access the database on the server depends on the server IP address too, so will this need to be changed if the Linksys is handling IP addressing? How does the hub affect any of this... does it change or interfere with the addressing in any way?
Thank in advance for any ideas or suggestions!

maxyourmacs, Welcome to the discussion area!
I am wondering if I should turn off IP distribution on the Airport Extreme and let the Linksys router handle all that?
Yes
The software that the other wireless iMacs run to access the database on the server depends on the server IP address too, so will this need to be changed if the Linksys is handling IP addressing?
Probably
How does the hub affect any of this... does it change or interfere with the addressing in any way?
It has no affect.

Setting up a 5 GHz only network with my AirPort Extreme

"I recently purchased a 21.5" Samsung monitor that is connected to my late 2009 13" 2.26GHz 8GB RAM MacBook Pro through a VGA connection with the VGA to Mini DisplayPort adaptor. Since I've started using it, my Internet connection has slowed to a crawl. I've researched the issue online and external monitors can apparently created wireless interference. I'm using a 2011 AirPort Extreme 802.11n/b/g. Is there anything I can do to eliminate this interference?"
I posted this at this link https://discussions.apple.com/message/18254901?ac_cid=142432#18254901?ac_cid=142 432 and did receive an informative reply that led me to believe that my monitor currently broadcasts in the same wireless band that my MacBook Pro is reading on, in this case 2.4 GHz. I know the AirPort Extreme broadcasts in a 5 GHz band as well (which I thought I was, on all this time) and would prefer that my MBP read from that wave instead anyway (which should in turn solve my problem). I looked up how to do this and was told that by using AirPort Utility (version 6.0), and check to uniquely name the 5 GHz network, a separate 5 GHz only network should be created and selectabel under the Wi-Fi menu in the menu bar. I check this and restarted the router, but did not see the new network for the same router. I need to be able to force my MBP to read on the 5 GHz network since the 2.4 GHz network currently slows my internet connection to a crawl. Any advice on how to properly do this?

Something is amiss here.
Normally, if you enable the option to assign a separate name to the 5 GHz network, AirPort Utility simply adds 5 GHz to the name of your wireless network.
So, if your normal network is named......
Wireless Network, when you enable the 5 GHz option, another network is created with the name Wireless Network 5 GHz.
Once the AirPort Extreme is updated, you must click on the fan shaped AirPort icon at the top of the MBP screen, click Join Other Network, click Show Networks, and then select Wireless Network 5 GHz and enter the password to connect.
This action "points" the MBP to the 5 GHz network that you have named.
Next, you need to change the settings in AirPort Preferences to make sure that the 5 GHz network is located first at the top of the connection list....so the MBP will connect to the named network first, and automatically.
Unfortunately, "forcing" a Mac to connect to 5 GHz will not necessarily result in a better connecton if there are obstructions in the signal path between the Mac and AirPort Exteme. 5 GHz signals are significantly weaker than 2.4 GHz sigals, so they will not penetrate walls, ceilings and other obstructions nearly as effectively as 2.4 GHz signals.
Post back to tell us what steps you are performing now.....and what happens after each step so we can sort things out to see if 5 GHz will result in a better connection.

Can Airport Express extend the private and guest networks simultaneously?

Can the Airport Express be used to extend the private and guest WiFi networks coming from the base station simultaneously, or can it only be an extension for one of the two at a given time?
Joe

Can the Airport Express be used to extend the private and guest WiFi networks coming from the base station simultaneously
Yes, either by a wireless connection or Ethernet connection to the base station.....assuming that both the base station and extender are using firmware 7.6.3 or higher and AirPort Utility 6.3 is used to configure both AirPorts, which must be dual band models.

Is it possible to move content between private and public sites after publishing the latter?

Hi. Is anyone else in this position? My institution kept its original iTunes U site after migrating our public content to the new public site last year. We now have separate public and private (university log-in only) sites and must maintain both. The Public Site Administrator allowed the copying of existing content from the original iTunes U site to the new public site, but ONLY prior to publication of the public site. I have two related questions for the community:
1) How is it possible to maintain a workflow in which faculty create a course for the private iTunes U site (wanting to keep the content restricted to our students while the course is live), but then move the content over to the public site once the semester ends?
2) With the new app for Courses and the Course Manager on the public site, what do we do with the courses already created by faculty as Collections (either in the public or private sites)?
I hope there are folks out there that can help.
Thanks!
Kevin

I'd like to see a discussion on this exact topic as well. Have you determined yet how to move a private course (apple hosted) to the public site? Can you use an RSS feed from the private?
joe

Single item having content type property set for both GIF and JPEGs

Is it possible to have a single blob column in the database that stores either jpegs or gif files and then the ability to display either type through a hyperdrill on a Discoverer item? If so, how can the content type property on an blob item be set to two options?
regards
Paul P

Hi,
Discoverer will use the content_type property to set the MIME type used when opening the blob. So if your blob contains more than one type of file and you want to use different programs to view the files then there are 2 options you can use:
Option 1: Create a EUL item for each content type. For example, you create a item called gif_content, set the content type to gif, and use decode(type, 'GIF', blob) to populate the item only if the content is gif. Then the user will see multiple hyperlink columns, but only one of the columns will contain a link in each row.
Option 2: Create a mod_plsql procedure to download the blob. Rather than include the blob in your EUL, instead include a URL that runs your mod_plsql procedure to download the blob. Set the content type for the URL to be FILE and in the procedure set the MIME type using OWA_UTIL.mime_header and download the blob using WPG_DOCLOAD.download_file. Then the user will see one URL hyperlink that will download all file types.
Hope that helps,
Rod West

HT204053 I set up my iTune and iCloud account with my work email sometime ago. Last week I changed my iTune email account to a personal email and noticed that the iCloud account has not changed. I pay for additional storage and would like this changed?

My first iTune and iCloud account was set up with a work email address. Last week, I changed my AppleID to a personal email account, but have found that on my iPhone under settings, iCloud, my account still has my work email. How can I change this to reflect my new personal email. I also pay to have extra storage, how is all of this working/tying together? Please help!

Sorry, you cannot use more than one iTunes account at a time.

Is this type of set-up possible - private and public network with Airport

Similar Messages

Maybe you are looking for