Opening multiple ports on Airport Extreme

I need to open multiple ports on an Airport Extreme to allow for ftps service (about 500 ports). In port forwarding, it appears that I would have to enter 500 entries to do that (e.g. port 4001, 4002, 4003 etc.) Sounds wacky. In other routers (or linux sortware), multiple entries can be entered like "400, 4000-4500". Apple docs don't address this (from what I could find). Is there a syntax for multiple port forwarding?

Are you using the round 802.11b/g AirPort Extreme base station (AEBS) or the square 802.11b/g/n AEBS?
The round AEBS does not allow you to enter ranges. The only solution for a great number of ports is to use the default host option and send ALL the ports to the designated computer.
I believe that the square AEBS allows you to enter ranges.

Similar Messages

Can't open FTP ports in Airport Extreme router

Hi,
I have three computers networked at home with an Airport Extreme serving as a router to the internet. A couple days ago I set up an FTP server on one computer (Ubuntu Linux). It is running properly and I CAN get into the FTP server via the local area IP address (10.0.1.101). However, no matter what I do I can't get the Airport Extreme to forward any FTP connections from outside. I have port forwarding set up correctly and working correctly for echo (7), daytime (13) ssh (22) http (80) nfs (2049) and vnc (5900). However, even though I set ports 20,21 to be forwarded to the correct computer nmap they are NOT open. (nmap doesn't see them, and telnet to ports 20 or 21 is refused. However nmap on the server locally (ie as localhost) shows that these ports ARE open on the server, and ftpd IS running.) Neither of my mac laptops has ftp file sharing turned on in the preferences (not like this should matter anyway). The Airport Extreme just plain does not open or forward anything to ports 20-21.
I also tried putting the FTP server on a different port (2121), but this doesn't work either. Is this just Apple playing nanny and not allowing me to run FTP for my own good? I have been troubleshooting this for two days and no closer to a solution. I hope someone can offer some advice.
Craig

I believe that I've found the problem with the AirPort/Time Capsule (version 7.3.1) support for FTP.
For whatever reason, when an FTP connection comes-in from the WAN, the NAT translation is reporting the IP address of WAN side of the router instead of the IP address of the actual system connecting from the Internet.
I confirmed this by setting up a FTP server on my Linux machine and watching the connection to the FTP server from the internet. When you perform a:
netstat -an | grep ':21 '
from the Linux shell, you see that the IP address that is connected is your own WAN IP address of your AirPort/Time Capsule.
Apparently the AirPort/Time Capsule recognizes the connection is an FTP client and manipulates the connection in such a way as to report the wrong IP address that is connecting to your FTP server.
This isn't a problem, unless you're using /etc/hosts.allow and /etc/hosts.deny to have port wrapper permit only listed IP addresses to have access to the FTP service. In that case, all connections seem to come in from your router's WAN IP address, so there's no way to distinguish where the connection is coming from.
Apple needs to take a closer look at the version 7.3.1 for the Time Capsule (not sure what the version is for the AirPort Extreme) and fix the reported IP address from the WAN side connection.

Open UDP Ports on AirPort Extreme

I need to open a few UDP Ports on my new AirPort Extreme so that the software that is running on my network can access the internet over those ports and the software can be accessed from the internet as well. I can find in the AirPort Extreme manual how to open TCP ports but not UDP. I have the list of ports I need to open, but can't find where to configure them in the router firmware.
I would like help on where to configure these ports. Thank you.

If you are using the Airport Utility on the Airport Extreme N Base Station, the port mapping screen should look like what you see on page 56 of the manual "Designing Airport Networks" found at:
http://manuals.info.apple.com/en/DesigningAirPort_Networks_Using_AirPortUtility.pdf
...and it clearly shows how/where to specify UDP and TCP ports.

Need help with opening ports on airport extreme

My vonage phone is connected to airport extreme router, voice quality of phone calls was poor. Vonage tech support says vonage port on my airport extreme was closed and i need to open it.
Here is my chat details with vonage tech support-
The following ports are needed for Internet communication between the Vonage adapters and the Vonage servers.
SIP: Port 5061 UDP
RTP (Voice) Traffic: Ports 10000-20000 UDP. When a call is made, a random port between 10000 and 20000 is used for RTP (Voice) traffic. If any of these ports are blocked, you may experience one way or no audio.
Please do suggest me the way to open the ports on airport extreme
Thanks
Venki

Instructions for opening ports is here.
https://discussions.apple.com/docs/DOC-3415
You should be fine opening the whole range, 10000-20000

Cannot open port through Airport Extreme to access security system DVR

I have internet access through Bellsouth DSL -- modem only. We had a security system set up around a DVR recording images and connected to the internet through a Linksys router. We would use a client on outside computers to connect to the security system dvr and see what was happening (live or recorded). I switched out the Linksys for the Airport Extreme, and now we cannot connect to the DVR.
Do I need to manually open a port to the DVR? How do I do this? The DVR connects to the Airport Extreme via Ethernet, and as far as I can tell, the Airport Extreme connects to the DSL modem via Ethernet using DHCP. We have a static IP address. I thank you in advance for any answers, and I apologize if I'm not giving enough information.

Let's double-check your Port Mapping setup on the 802.11n AirPort Extreme Base Station (AEBSn) ...
To setup port mapping on an 802.11n AirPort Extreme Base Station (AEBSn), either connect to the AEBSn's wireless network or temporarily connect directly, using an Ethernet cable, to one of the LAN port of the AEBSn, and then use the AirPort Utility, in Manual Setup, to make these settings:
1. Reserve a DHCP-provided IP address for the host device.
Internet > DHCP tab
o On the DHCP tab, click the "+" (Add) button to enter DHCP Reservations.
o Description: <enter the desired description of the host device>
o Reserve address by: MAC Address
o Click Continue.
o MAC Address: <enter the MAC (what Apple calls Ethernet ID if you are using wired or AirPort ID if wireless) hardware address of the host computer>
o IPv4 Address: 10.0.1.4
o Click Done.
2. Setup Port Mapping on the AEBSn.
Advanced > Port Mapping tab
o Click the "+" (Add) button
o Service: <choose the appropriate service from the Service pop-up menu>
o Public UDP Port(s): 6746
o Public TCP Port(s): 6746
o Private IP Address: 10.0.1.4
o Private UDP Port(s): 6746
o Private TCP Port(s): 6746
o Click "Continue"

Open ports on airport extreme

How can I open port 3389 on airport extreme/time capsule?

Suggest that you take a look at this User Tip......provided by forum expert Tesserax......to get started on the basics of port mapping:
AirPort - Port Mapping Basics using AirPort Utility v6.x

Open port in airport extreme for Amule

I need help with this issue because I get an Low ID when i open Amule. I know its needed to open ports TCP 4662 and UDP 4672 in Airporte Extreme mapping ports but Im not sure what exactly I have to do. I hope for any help.
Thanks

I think you need to provide more information about what you've done and what you're trying to do.
Did you assign a static LAN IP address to the NAS, what are your port forwarding entries, etc?

Trying to Port Forward Airport Extreme 802.11ac using Airpot Utility 6.3.2

Hello kind experts. I am finally getting around to replacing my old BEFSR81 Cisco Router with an old Time Capsule attached with the Airport Extreme 802.11ac. The BEFSR81 also had 8 ports, so I have 8 hardwired locations throughout the house. I have a couple of IP cameras for which it was easy to port forward on the Cisco (just click on the port range forwarding tab, type the start/end ranges (which are identical) and the assigned IP address). Everything has been working well for years. Here's what I wish to do with the new setup: Cable Modem -> Airport Extreme -> Dumb gigaport switch with the hardwires connected to it.
When I go to Airport Utility (6.3.2) -> Network Tab -> Port Settings -> "+", the following comes up:
Firewall Entry Type (Defaulted to IPv4 Port Mapping)
Description (5 pull down choices)
Public UDP Ports : _________
Public TCP Ports: __________
Private IP Address (I take it that is where I enter the IP address for each camera, e.g. 192.168.1.xxx)?
Private UDP Ports: __________
Private TCP Ports: __________
I am obviously not a technophile, especially when it comes to networking, but was able to create my old setup.
Any advice on whether or not my configuration is appropriate and what exactly I need to put in the port fields would be greatly appreciated!
Thanks in advance!

To successfully access an IP camera on the local network from the Internet, the following basics need to be taken care of:
Install the camera(s) and verify that you can access them from the local network.
Configure port mapping/forwarding on your router. Typically, IP cameras require at least two ports: 1) A web port for administering the camera; Usually TCP port 80, and 2) A streaming port to broadcast the camera video feed; Usually UDP port 9000. Note: You should check with your camera's documentation for the exact ports required.
If the camera is attached to a computer, you will need to configure the computer's firewall to open the same ports as in step 2 above.
Verify that your modem is in bridge mode, i.e., if the modem provides NAT & DHCP services, turn them off.
Test your network. Use CheckIP to determine your router's current WAN-side (public) IP address. Then, from a remote location (not from a computer on the local network), use the DynDNS Open Port Tool to verify that the required ports are open. Success is an "Open" response from the Tool.
Check out the following AirPort User tip for configuring port mapping on an AirPort base station.

Port Forwarding Non-Preconfigured Ports on Airport Extreme

1. Opened up Airport Utility.
2. Under Internet/DHCP, reserved a static IP - 172.16.1.201 for a VoIP unit that is wired to one of the AEBS ports.
2. Under Internet/NAT, checked "Enable NAT Port Mapping Protocol" then clicked on "Configure Port Mappings..." button (which transfers me to Advanced/Port Mapping).
3. Added a pre-configured "Personal Web Sharing" port (80) to 172.16.1.201.
4. Updated and restarted AEBS.
5. Using http://www.canyouseeme.org/ as well as opening a browser referencing my global IP:80, I was able to verify that port 80 is indeed open.
6. Went back to step #3 and added a non-pre-configured port going to the same private address 172.16.1.201. Port is UDP 5060 for SIP.
7. Updated and restarted AEBS.
8. Verified port 80 is still open, but 5060 is not.
Is there anything wrong with my setup? Any help / advise would be GREATLY appreciated!
Thanks!

This is the exact same problem I'm having. Strangely, some of my non-standard ports are being forwarded just fine.
Specifically, I need to forward ports to enable ftp clients to browse in passive mode. In order to do this they must be able to communicate with the ftp server on ports other than 21, with each client receiving its own additional port. I've been using the range 3000-3008 for this purpose and until recently it seemed to be working, but now all probe scans report closed, regardless of what port range I use them for.
I mention ftp because I know the Airport Extreme discriminates between certain types of traffic and handles them according to whatever programming they stick in there. I don't know how the Airport Extreme router could be discriminating between the different ports I'm reassigning and forwarding, but I know it's causing them to become closed. In a range previously undefined in the port forwarding, probe scans report "stealth". After forwarding, the probes report "closed".
Can anyone tell me what's going on here?
Enabling default host is not an option (and it shouldn't need to be). I have reasons for not wanting to let all ranges of ports automatically be forwarded to this computer.

Enabling ports on Airport Extreme

I am trying to enable ports 80 and 443 on my airport extreme to allow my TV to connect wirelessly to our network for Netflix, but am really a novice as to how to go about this. Can anyone help me with step by step directions for this? My airport is 802.11n version 7.5.2.

Port Mapping takes two basic steps: 1) Either configuring the host devices with a static Private IP address or use a DHCP-reserved IP address, and 2) Configuring the router to open specific ports to forward traffic from the Internet to the host device.
I will provide you with instructions that will take advantage of your 802.11n AirPort Extreme Base Station's (AEBSn) ability to reserve DHCP addresses.
AEBSn - Port Mapping Setup
To setup port mapping on an AEBSn, either connect to the AEBSn's wireless network or temporarily connect directly, using an Ethernet cable, to one of the LAN port of the AEBSn, and then use the AirPort Utility, in Manual Setup, to make these settings:
1. Reserve a DHCP-provided IP address for the Internet-ready TV.
Internet > DHCP tab
o On the DHCP tab, click the "+" (Add) button to enter DHCP Reservations.
o Description: <enter the desired description of the host device>
o Reserve address by: MAC Address
o Click Continue.
o MAC Address: <enter the MAC address of the TV; this could either be the TV's Ethernet port or wireless adapter as appropriate for your situation>
o IPv4 Address: <enter the desired Private IP address>
o Click Done.
2. Setup Port Mapping on the AEBSn.
Advanced > Port Mapping tab
o Click the "+" (Add) button
o Service: <choose the appropriate service from the Service pop-up menu>
o Public UDP Port(s): <you can ignore this field>
o Public TCP Port(s): 80, 443
o Private IP Address: <enter the IP address of the TV that you created in the previous step earlier>
o Private UDP Port(s): <you can ignore this field>
o Private TCP Port(s): 80, 443
o Click "Continue"

Block Ports On Airport Extreme

Yesterday my Linux Gateway crashed. It was an old computer and I had been thinking of replacing it with my Airport Extreme. Now, that the old computer has crashed, I am forced to do this.
I know that I can do port mapping to forward incoming ports to specific computers, but I am curious whether I can block certain ports. I would like not to allow, pinging, and telnet for instance. I have a lot of computers behind this router and don't really want to block each and everyone. Is there a way to do this?
Is this considered a Gateway?
I am curious about port mapping. I created two maps. POP and SMTP. When doing this, it asks for an internal private IP address. I gave it the address of my computer that has my mail client on it. So I assumed that this would allow these ports to go to that IP. But, my wife's computer has her mail client on it. (we both use MS Outlook). She was able to get her mail and send mail. So, what is the deal with the private IP address?
I would also like to be able to VNC and RDP into several different computers on my network. On my previous Gateway, I set up port forwarding by using bogus ports to each machine. (ie. incoming port 50001 would go to my internal ip of 10.0.1.101 and port 50002 would go to my internal 10.0.2.102, etc). I am assuming that I can do this on the airport extreme as well.
I have STF for these, but really haven't found my answers (or maybe just not searching by the right words). Can anyone help me on this?

I know that I can do port mapping to forward incoming ports to specific computers, but I am curious whether I can block certain ports. I would like not to allow, pinging, and telnet for instance. I have a lot of computers behind this router and don't really want to block each and everyone. Is there a way to do this?
By default, the AirPort Extreme Base Station (AEBS) blocks ALL incoming ports. Unfortunately, the AirPort Utility does not offer any means to configure ports specifically. As a workaround, you could port forward any ports that you wanted "blocked" to a fictitious device on the local network.
Is this considered a Gateway?
A term "Gateway" can have a number of interpretations. In general computer networking terms, a Gateway is a network device that is used to connect devices across two different media. In the most commonly used case, these media would be Internet & Local Area Network.
Gateways are also used interchangeably to mean the same thing as routers, modem or combination router/modems and often leads to confusion.
So to answer your question, yes, the AEBS is a Gateway device.
I am curious about port mapping. I created two maps. POP and SMTP. When doing this, it asks for an internal private IP address. I gave it the address of my computer that has my mail client on it. So I assumed that this would allow these ports to go to that IP. But, my wife's computer has her mail client on it. (we both use MS Outlook). She was able to get her mail and send mail. So, what is the deal with the private IP address?
The problem with port mapping is that even though you can map multiple ports to a single device, you cannot map a single port to multiple devices.
Did you make sure to map ALL ports used by these two mail protocols? That is there are secure ports used by these protocols as well. It may be possible that your wife's mail client used one of these instead or that her client is configured to use other ports to receive or send mail.
I would also like to be able to VNC and RDP into several different computers on my network. On my previous Gateway, I set up port forwarding by using bogus ports to each machine. (ie. incoming port 50001 would go to my internal ip of 10.0.1.101 and port 50002 would go to my internal 10.0.2.102, etc). I am assuming that I can do this on the airport extreme as well.
Yes.

Map a port through Airport Extreme to access my NAS remotely through FTP

Hello Everyone,
Was hoping someone might be able to enlighten me. I recently purchased a WD ShareSpace. It has the ability to setup FTP access to it. I am currently using an Airport Extreme and I seem to be having trouble finding information on how to setup my AE to allow my WD be accessed outside my router. I have looked at the settings for port mapping and assume I need to setup a Service in there for FTP Access, but regarding all the UTP ports and addresses, I am a little lost.
I cant seem to find a simple site that kind of goes into details on more or less what is what, how this and that work. I do well with networking but a lot of this port mapping and forwarding stuff is somewhat new to me.
Any help would be great, thank you!
Tim

The WD ShareSpace has a bunch of ways (it seems) to connect to it remotely, but I know that I would still need to open access up through the router.
It probably is not worth it. WD makes it seem easy and tells how to access the NAS by typing in my ip and all, but I get the feeling it is not as easy nor secure as they make it sound.
There is a built in menu regarding FTP through WD web configuration, so I got the impression it might be easier.
Simply all I want to do is access my music and movies from the NAS elsewhere. I get the feeling this is not the best move in regards to security.
Thanks!

Opening a port on Airport in order to use microsoft remote desktop

I have Microsoft Remote Desktop connection installed on my MacBook and I am able to connect to my company's VPN and use the remote desktop when I am using another wireless network but I am not able to connect at home using my Airport extreme. When I try to connect from home I receive the following warning: "You were disconnected from the Windows-based computer because of network problems. Verify that your network and Internet connections are working, and then try reconnecting to the Windows-based computer." I know all my settings for the VPN and Remote Desktop are correct because I can log on elsewhere. Someone mentioned that I may need to open/forward a port on my router in order for it to work. Does anyone have any information or know where I could find information that would be helpful??
Thanks,
Erin

This is from Apple documentation regarding their version of port forwarding.
AirPort Extreme uses Network Address Translation (NAT) to share a single IP address with the computers that join the AirPort Extreme network. To provide Internet access to several computers with one IP address, NAT assigns private IP addresses to each computer on the AirPort Extreme network, and then matches these addresses with port numbers. The wireless device creates a port-to-private IP address table entry when a computer on your AirPort (private) network sends a request for information to the Internet.
If you are using a web, AppleShare, or FTP server on your AirPort Extreme network, other computers initiate communication with your server. Because the Apple wireless device has no table entries for these requests, it has no way of directing the information to the appropriate computer on your AirPort network.
To ensure that requests are properly routed to your web, AppleShare, or FTP server, you need to establish a permanent IP address for your server and provide inbound port mapping information to your Apple wireless device.
To set up inbound port mapping:
1. Open AirPort Utility, select your wireless device, and then choose Manual Setup from the Base Station menu, or double-click the device icon to open its configuration in a separate window. Enter the password if necessary.
2. Click the Advanced button, and then click Port Mapping.
3. Click the Add button and choose a service, such as Personal File Sharing, from the Service pop-up menu.
Type any additional information you need in the text fields.
To use port mapping, you must configure TCP/IP manually on the computer that is
running the web, AppleShare, or FTP server. You can also set up a computer as a default host to establish a permanent IP address for the computer and provide inbound port mapping information to the AirPort Extreme Base Station or AirPort Express. This is sometimes known as a DMZ and is useful when playing some network games or videoconferencing.
To set up a default host:
1. Open AirPort Utility, select your wireless device, and then choose Manual Setup from the Base Station menu, or double-click the device icon to open its configuration in a separate window. Enter the password if necessary.
2. Click the Internet button, and then click NAT.
3. Select the “Enable Default Host at” checkbox. The default IP address is 10.0.1.253.
4. Enter the same IP address on the host computer.
3389 is the port needed for Windows Remote Desktop.

Help setting up Open DNS with new airport extreme

I cant seem to get Open DNS to work with a new airport extreme. The status says I am not using Open DNS and its not filtering anything. I have followed the exact steps for set up listed on their website, checked the dns settings, cleared both caches and restarted the computer, modem and router with no success. I set the airport up in bridged mode, although I tried the other option under setup, but not sure what I was doing? I picked up this router because I wanted easy set up and the apple store assured me it would work with Open DNS. Oh, and I also downloaded the latest firmware update on the router. Can anyone help me with the settings or what else I need to check?

Sorry, I am not familiar with this product, so I checked online to pick up some information. Here I am referring to the information found here:
http://www.dslreports.com/faq/6096
I found that your device is mentioned as follows in the intro under Section 1 of this document:
The BellSouth supplied Westell 2100, 2200 and 6100 models (Models A90-210030-04, B90-220030-04, and B90-610030-06/C90-610030-06, respectively) share many features and functions.
Next, I am referring to the information under Section 2, under the heading of Standard Default Mode Connection (separate hub or switch present). Unless you have changed the configuration on the Westell, this is how your device is operating. In this mode, the Westell device is acting both as a modem and router in one unit.
So, an attached router (AirPort Extreme) must be configured as a switch to work correctly. That is what Bridge Mode is....the AirPort Extreme is operating as a switch when it is in Bridge Mode (which would be the correct setting to use when the Westell is set to its Standard Default Mode).
Any changes that you want to make regarding DNS settings would need to be made on the Westell device, since it is acting as the main router on your network.
In Bridge Mode, the AirPort Extreme simply passes that information through to its connected devices. You will not be able to make any DNS related changes on the AirPort Extreme since it receives that info from the Westel device. Some service providers force you to use their DNS servers, so you might want to check with Bell South or AT&T for more information in this regard.
If you want to be able to configure the AirPort Extreme as the main router on your network, and instruct it to use the DNS information that you want, you will need to refer to the section under the heading of Bridged Ethernet Mode ( separate router present).
Please note that the first item under this heading specifies that "This is the preferred configuration when using a separate external router..." (which would be the AirPort Extreme in your case)
So, it appears to me that this would be the way that you must reconfigure the Westell device to allow the AirPort Extreme to function as the "main" router on your network. In this type of setup, you will be able to enter the DNS information that you want to use under the setup for the AirPort Extreme and it will act as you instruct.
The AirPort Extreme would not be configured in Bridge Mode for this....it would be configured to "Share a public IP address".
The next item in the article specifies that you "Must use a PPPoE client on the Router." This means that the AirPort Extreme would be configured to Connect Using = PPPoE as follows:
AirPort Utility - Manual Setup
Click the Internet icon
Click the Internet Connection tab
Connect Using = PPPoE
You would enter your user name (probably your email address), password, etc in this area. Leave the Service Area box completely blank. Set Connection to Always On, and Disconnect if Idle to Never
Click Update to save the new settings. Power off the Westell device after this and then restart it so that it will pick up the new information that you have programmed into the AirPort Extreme.
I want to stress that this is how I would try to configure the Westell and AirPort Extreme. But, as I said, have not used a Westell device, so I cannot say that this will work correctly for you.
It might be an excellent idea to contact Bell South or AT&T Support to ask for their opinion on this before you decide to change the configuration of the Westel device and the AirPort Extreme.
This type of thing can be intimidating for users, so you might elect to use the services of someone like the Geek Squad at Best Buy, or a similar service from a local computer firm. Perhaps the Apple store could help as well.
If it is not critical that you use Open DNS, you might want to simply leave things "as is", with the AirPort Extreme in Bridge Mode.

Is there ANY way to configure the wired ports on Airport Extreme with 7.6.1 software?

I need to connect a Cisco router to one of the wired ports because I'm creating a home lab with several switches and routers and attached hosts. I need the VERY BASIC ability to set (or even just to SEE) what IP address the AirPort is using/assigning, but with the current AirPort Utility, you apparently can't show the DHCP table for wired connections or set up a static pool of addresses to use or really, to do anything else that is ABSOLUTELY BASIC networking configurations for a router. I don't even know what range of IP addresses the AirPort is using for the wired ports.
I love this device - it works much better than my old Linksys that I replaced a couple years ago, but this is the Apple Nannies taking things too far. Sure, make the products easy to configure and use, but stop taking away the ability for advanced users to actually use the product because all you're doing is ******* off your power users - which are the exact people whose friends always ask for recommendations on what products to buy. I've always recommended Apple products to everyone, but if they're going to engineer everything so that only stupid people can use them, then only stupid people will buy (and recommend) them. (Can you tell I'm annoyed that I've wasted so much time on a completely unnecessary and irrelvant side-issue when I should be already working on my actual work project?)
/Rant-off
So, does anyone know how to access the actual configuration of the AirPort Extreme so I can use a static IP address for my Cisco router that's plugged into one of the AirPort's wired ports? That's all I need.
Thanks.

The AirPort assigns IP addresses via DHCP in a range you specify. You may also elect to assign devices their own static IP addresses. That does not involve the Extreme at all, though you may "reserve" those addresses in its DHCP Reservations table.
AirPort Utility > Network > Network Options...
Assigning static IP addresses obviates any need to determine the IP addresses the Extreme assigns.
Update its firmware to version 7.6.3.

Opening multiple ports on Airport Extreme

Similar Messages

Maybe you are looking for