Use base station as router instead of cable modem

I have a cable modem that is also a router connected by a wire to the Airport extreme base station. Officially, the Airport should be used as a bridge, disabling the distribute IP option. The thing is this modem ***** and I can't replace it because its from my cable company and also used as IP phone. I would like the Airport to be the DHCP router and handle all the NAT. However, when I turn on the distribute IP option the Airport is freezing.
Note that there is no way to shut down DHCP router on the cable modem.
The modem uses 192.168.1.1 type addresses. Should the airport distribution also be configured to this type of address or to a different one, such as 10.0.0.1.
Is there an optimal way to use the airport DHCP and NAT, bypassing the DHCP of the modem?
Thanks,
Y.

The disabling of the DHCP in the router is a must. Without first disabling the router, you will have DHCP conflicts.

Similar Messages

My Airport base station doesn't see the cable modem

I know I have internet upto the Wan Port. I can get online if I connect directly to my laptop, put not if I try to connect through the airport. Any ideas?

Are you completely powering off the cable modem....pulling the power cord from the back of the device or the wall plug.....and then leaving it powered off for at least 30 minutes?
Then, connecting the AirPort to the modem?
If no luck, see if the modem has an accessible battery that you can pull as well for the power down session.
Some providers take even longer to reset the connection back at the equipment at the cable company, so try powering off the modem a few hours if 30 minutes does not work.
Finally, it may be necessary to perform a Factory Default Reset on the AirPort to start all over again.

I connected the TC T2 with the iMac and used Air Port Utility to have it join my existing network. Now I have green lights on Apple Base Station and TC with the cable connected to the Base Station because hen connected to TC -- I get only yellow lights fl

I connected the TC T2 with the iMac and used Air Port Utility to have it join my existing network. Now I have green lights on Apple Base Station and TC with the cable connected to the Base Station because hen connected to TC -- I get only yellow lights flashing on both devices>
When Connected through the Apple Base station I have perfect internet wireless capability thru-out house.
Lamont

I connected the TC T2 with the iMac and used Air Port Utility to have it join my existing network. Now I have green lights on Apple Base Station and TC with the cable connected to the Base Station because hen connected to TC -- I get only yellow lights flashing on both devices>
When Connected through the Apple Base station I have perfect internet wireless capability thru-out house.
Lamont

Router connected to cable modem by Ethernet port cannot get IP address from DHCP.

I have an ethernet cable on Fa0/0 connecting my 1841 router to my cable modem. The issue is that the router cannot obtain an IP address via DHCP when I have the "ACL-OUTSIDE-IN" ACL applied inbound on the Fa0/0 interface. I tried to allow all BOOTP and BOOTPS traffic in my ACL, but still no luck. I really don't want to run the router without a simple ACL firewall and connect it to the internet. When I take off the ACL off of Fa0/0, the router is able to get an IP address via DHCP.
Router#sh run
Building configuration...
Current configuration : 10736 bytes
! Last configuration change at 18:14:42 MST Fri Nov 16 2012 by matt.chan
version 12.4
service nagle
service timestamps debug datetime msec localtime show-timezone year
service timestamps log datetime msec localtime show-timezone year
service password-encryption
hostname Router
boot-start-marker
boot system flash:c1841-advipservicesk9-mz.124-25f.bin
boot-end-marker
logging count
logging userinfo
logging buffered 1048576 informational
enable secret 5 <removed>
aaa new-model
aaa authentication login AUTH-LOCAL local-case
aaa session-id unique
memory-size iomem 25
clock timezone MST -7
ip cef
ip nbar pdlm flash:directconnect.pdlm
ip nbar pdlm flash:citrix.pdlm
ip nbar pdlm flash:bittorrent.pdlm
ip nbar custom steam destination udp range 27000 27030
ip nbar custom rdp destination tcp range 3389 3391 55402
ip domain lookup source-interface FastEthernet0/0
ip name-server 8.8.8.8
ip inspect name fa0/0_inspect_ou icmp router-traffic timeout 10
ip inspect name fa0/0_inspect_ou ftp timeout 300
ip inspect name fa0/0_inspect_ou udp router-traffic timeout 120
ip inspect name fa0/0_inspect_ou tcp router-traffic timeout 300
login block-for 60 attempts 4 within 60
login quiet-mode access-class ACL-ACCESS-QUIET
password encryption aes
crypto pki trustpoint TP-self-signed-1755372391
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1755372391
revocation-check none
rsakeypair TP-self-signed-1755372391
crypto pki certificate chain TP-self-signed-1755372391
certificate self-signed 01
3082023F 308201A8 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 31373535 33373233 3931301E 170D3132 31313137 30313130
35325A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 37353533
37323339 3130819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100D53F 9EB5B123 3103A4D5 82E786F7 F91C2DE5 9E409A22 80AF78F6 812F624A
89FE9103 73C4AAAB 13FF880D F628607D 6888AC49 18BEDD77 778F0DB1 F9A796E9
E92717CD 6DD19450 5066620A 91278C33 E38349EA 92B8C671 80761609 0AC46E6F
2C8C6BCF ABC7E1F7 A64BD28C C85477FE B23F8A7C 555ECDF9 CE461B8D 6C017370
0ED70203 010001A3 67306530 0F060355 1D130101 FF040530 030101FF 30120603
551D1104 0B300982 074E5543 4C455553 301F0603 551D2304 18301680 146CA2E0
936C651F E2ED4DCD D7025FF3 2AB029E0 95301D06 03551D0E 04160414 6CA2E093
6C651FE2 ED4DCDD7 025FF32A B029E095 300D0609 2A864886 F70D0101 04050003
8181004A AFA4D07C 1424DE0E EF3F17F2 BB1EA63B CB17C13D 1AEA31A1 BAB6AF77
DB6EA8A2 2117DCD1 5530A18C 3618D568 CC7EF520 E039ACBD DA906352 BB7E51BD
0954490C B2AB30C2 FBBE4738 C214BE1C CB63FFEA BAFC46E0 3DC419EE 714B9ABD
144A21E3 3E54C103 FF47FAF1 412FE5C4 59ACD1FE FD72356B C8DC04C3 E2EDF275 45954C
quit
username <removed secret 5 <removed>
ip ssh maxstartups 10
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh port 2226 rotary 1
ip ssh version 2
class-map match-all Zuri-YouTube-Class
match access-group name NAT-Pool-Zuri-WLAN
match protocol http host "*youtube.com*"
policy-map PMAP-QOS-VTI-IN
description QOS FOR TU0
class class-default
shape peak 1512000
policy-map PMAP-QOS-VTI-OUT
description QOS FOR TU0
class class-default
shape peak 512000
crypto isakmp policy 1
encr aes 256
authentication pre-share
group 5
lifetime 43200
crypto isakmp key 6 <removed> address <removed>
crypto isakmp invalid-spi-recovery
crypto isakmp keepalive 10 5 periodic
crypto ipsec transform-set EDGE-TS ah-sha-hmac esp-aes 256
crypto ipsec profile EDGE
set security-association lifetime kilobytes 256000
set transform-set EDGE-TS
set pfs group5
interface Loopback0
no ip address
interface Tunnel0
description "VTI Link"
bandwidth 4000
ip address 172.20.0.2 255.255.255.0
ip mtu 1400
ip nbar protocol-discovery
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1360
ip ospf authentication message-digest
ip ospf message-digest-key 1 md5 7 12090011003E5A0C0F186E752220211B4A
keepalive 10 5
tunnel source FastEthernet0/0
tunnel destination <removed>
tunnel mode ipsec ipv4
tunnel path-mtu-discovery
tunnel protection ipsec profile EDGE
service-policy output PMAP-QOS-VTI-OUT
hold-queue 75 out
interface FastEthernet0/0
description "Link to ISP"
bandwidth 4000
ip address dhcp
ip access-group ACL-OUTSIDE-IN in
no ip proxy-arp
ip nbar protocol-discovery
ip nat outside
ip inspect fa0/0_inspect_ou out
ip virtual-reassembly
ip ospf cost 1
duplex auto
speed auto
no keepalive
no cdp enable
interface FastEthernet0/1
description "Link to LAN"
ip address 172.16.0.1 255.255.255.248
ip access-group ACL-INSIDE-IN in
no ip proxy-arp
ip nbar protocol-discovery
ip nat inside
ip virtual-reassembly
ip ospf cost 1
ip ospf priority 255
duplex auto
speed auto
no keepalive
router ospf 1
log-adjacency-changes
redistribute static subnets
passive-interface default
no passive-interface Tunnel0
network 172.20.0.0 0.0.0.3 area 0
ip forward-protocol nd
ip route 10.0.0.0 255.0.0.0 Null0 name "Class A Private"
ip route 172.16.0.0 255.240.0.0 Null0 name "Class B Private"
ip route 172.17.0.0 255.255.0.0 FastEthernet0/1 172.16.0.2 name "Home WLAN"
ip route 172.19.73.31 255.255.255.255 Null0
ip route 172.27.0.0 255.255.0.0 Tunnel0 172.20.0.1 name "IPsec GRE Tunnel"
ip route 192.168.0.0 255.255.0.0 Null0 name "Class C Private"
ip route 192.168.0.0 255.255.255.0 Tunnel0 172.20.0.1 name "VLAN 70"
ip route 192.168.100.1 255.255.255.255 FastEthernet0/0 70.162.0.1 permanent name "CABLE MODEM MANAGEMENT"
ip route 0.0.0.0 0.0.0.0 FastEthernet0/0 dhcp 253
ip dns server
no ip http server
ip http authentication local
ip http secure-server
ip http timeout-policy idle 60 life 86400 requests 10000
ip nat translation tcp-timeout 300
ip nat translation udp-timeout 120
ip nat translation max-entries 2048
ip nat inside source list ACL-NAT-172.16.0.0/29 interface FastEthernet0/0 overload
ip nat inside source list ACL-NAT-MANAGEMENT interface FastEthernet0/0 overload
ip nat inside source static tcp 172.16.0.4 22 interface FastEthernet0/0 2227
ip nat inside source static tcp 172.16.0.5 3389 interface FastEthernet0/0 3391
ip nat inside source static tcp 172.16.0.3 3389 interface FastEthernet0/0 3390
ip nat inside source static tcp 172.16.0.4 80 interface FastEthernet0/0 8084
ip access-list standard ACL-ACCESS-QUIET
permit 216.161.180.16
permit 172.16.0.0 0.1.255.255
permit 172.27.0.0 0.0.127.255
permit 172.20.0.0 0.0.0.3
ip access-list standard ACL-NAT-172.16.0.0/29
permit 172.16.0.0 0.0.0.7
ip access-list standard ACL-NAT-172.17.0.0/24
permit 172.17.0.0 0.0.0.255
ip access-list standard ACL-NAT-172.17.1.0/24
permit 172.17.1.0 0.0.0.255
ip access-list standard ACL-SNMP
permit 172.16.0.4
ip access-list extended ACL-CRY-MAP
ip access-list extended ACL-INSIDE-IN
deny   ip host 172.16.0.2 172.27.0.0 0.0.127.255
deny   ip host 172.16.0.2 172.20.0.0 0.0.0.3
permit ip 172.17.0.0 0.0.0.255 any
permit ip 172.16.0.0 0.0.0.7 any
permit ip 172.17.1.0 0.0.0.255 any
ip access-list extended ACL-NAT-MANAGEMENT
permit tcp host 172.27.10.11 eq 3389 host 72.166.77.196
ip access-list extended ACL-OUTSIDE-IN
deny   ip 10.0.0.0 0.255.255.255 any
deny   ip 172.16.0.0 0.15.255.255 any
deny   ip 192.168.0.0 0.0.255.255 any
permit tcp any any range 3390 3391
permit udp any any eq bootpc
permit udp any any eq bootps
permit tcp any any range 2226 2228
permit tcp any any range 8081 8084
permit icmp any any echo
permit icmp any any net-unreachable
permit icmp any any host-unreachable
permit icmp any any port-unreachable
permit icmp any any parameter-problem
permit icmp any any packet-too-big
permit icmp any any administratively-prohibited
permit icmp any any source-quench
permit icmp any any ttl-exceeded
deny   icmp any any
deny   ip any any
ip access-list log-update threshold 10
logging history informational
logging trap debugging
logging 172.17.228.17
logging 172.17.228.10
control-plane
line con 0
exec-timeout 15 0
privilege level 15
logging synchronous
login authentication AUTH-LOCAL
line aux 0
login authentication AUTH-LOCAL
line vty 0 4
exec-timeout 60 0
privilege level 15
logging synchronous
login authentication AUTH-LOCAL
rotary 1
transport input ssh
scheduler allocate 20000 1000
ntp clock-period 17178311
ntp source FastEthernet0/0
ntp server 148.167.132.201
end

Hi Matt,
Try adding below line
ip access-list extended ACL-OUTSIDE-IN
permit udp any eq bootpc any eq bootps
Regards
Najaf
Please rate when applicable or helpful !!!

Wrt54gs router to internet cable modem connection drop

With the wrt54gs router set at auto dhcp and mostly on default settings, after some time of inactivity the connection between the router and internet cable modem drops out. That is, when there is no activity (no transmission to/from internet) the connection drops and the wireless connections shows "local only." Any suggestions/comments on why this is so? Thanks!

Have you tried to connect the Modem to the computer and checked if you are facing the same problem or not?
On your Router setup page, change the MTU size from AUTO to Manual and change the Size from 1500 to 1350 and click on Save Settings..... Then click on the Wireless tab and below Set the Radio Band to Standard-20MHz and change the Standard channel to 11-2.462GHz...Wireless SSID broadcast should be Enabled and then click on Save Settings...
Click on the sub tab under Wireless "Advanced Wireless Settings"
Change the Beacon Interval to 75,Change the Fragmentation Threshold to 2304,Change the RTS Threshold to 2304 and Click on Save Settings...
Now see if you can locate your Wireless Network and attempt to connect...

Does AppleTV work as a base station or router?

Wondering if AppleTV works as a wireless router as well. Can't it be set up like a base station? Don't see the logic in spending $300 just to not have to wait for netflix movies lol.
Thanks!

no the appletv cannot be used as any sort of network hub/router.

Clamshell iBook (indigo) can't find base station (Netgear router)

My first post on this forum. Now the proud owner of an indigo Clamshell iBook (OS 9.2.2)
I am using a Netgear router DG834G, a G3 snow iMac (OS10.3.9) as the base station, and a Dell PC is connected wirelessly to that. No problems at all.
I now want to connect an indigo Clamshell G3 iBook to the base station. (in fact, I have two of them)
The iBook is using Airport and running OS 9.2.2, and shows a strong router signal. The iBook TCP/IP has automatically updated all the values using DHCP, and the Router data page shows the iBook as "Connected", as well as its IP number (192.168.0.4) which was automatically assigned by the router. There is no encryption set up yet.
If you run OS 9 you will know this part...the iBook has a pull down window called "Base stations", to add new ones, but the Netgear router is NOT shown in it, and I can't add it. The box is empty, so I guess that's why I can't connect! All I get is an error message saying "check TCP/IP setttings or password". The default base station IP address (which I keep changing to the new one) is 10.0.1.1 (why?) My Netgear router is 192.168.0.1. The previous base station IP address still comes up, and I can't change it permanently. I don't have any password when prompted, (I tried the default one "public" ) so is that the main problem or is it something else? Is there a problem with Airport and non-Apple routers. I haven't seen this problem mentioned.
It seems as if I am 99% ready for internet conection
Thanks for your help. I've spent two days at it.

cranky5
See: http://discussions.apple.com/thread.jspa?threadID=530153&tstart=0
Rick

Advise Using Base Station as wireless and wired connection

I have an Airport Extreme dual N base station. I want to use it as a wireless base station to connect to the Internet and use the ethernet ports on the base station to connect to my security camera's DVR, to connect a Vonage phone and to plug into my computer on my desk. I have 5 static IPs which I don't have to use.
Is this possible and if it is could someone give me some pointers with hand holding on how to do it?
Thanks,
Michael

Did you connect them together and experience a problem?

Airport Extreme Base Station as router

I have a Mac Pro 1,1 Dual Core 2.66 GHz running OS X 10.5.8 but without an Airport Express card (not standard when I bought it in 2007).
Can I use an Airport Express or Extreme Base Station to connect without having to risk damaging the machine when installing an Airport Express card myself?
It sounds unlikely?

Hi Tesserax, I have a related question: I've just installed the new AX as the my main WiFi access point. I would like to use my old Airport Extreme Basestation (single band b/g/n) to connect my ethernet-only TV, PS3 and USB harddrive to the WiFi network. I expected to be able to use Airport Utilty to configure it to 'join' the network and provide access through the ethernet ports. I've used the AX in a similar setup in the past although it only has one ethernet port.
However, on the Airport Extreme Basestation I'm somehow only able to 'Create a network' or 'Extend a network'. I do not need to extend the WiFi network and concerned about the noticable bandwidth penalty.
Do you know if my desired setup is possible and how I can enable the 'join' mode?
Thanks in advance!

Can I use Base Station with Extreme Card?

Hi,
I was thinking of updating my iBook to a new one with an Extreme Card. I have the snow Base station that I am currently using with my G3 iBook. I know the G3 iBook with old Airport card would work on the Extreme Base Station but what about the other way around. Can I use the old Airport Card with a new Extreme Base Station? I would hate to have to spend the money on a new base station. I do understand the speed would be slightly slower than if both the base station and the card were extreme. Thanks.
Thom

I know the G3 iBook with old Airport card would work on the Extreme Base Station...
Can I use the old Airport Card with a new Extreme Base Station?
As you state in your first statement, yes a Mac using an original AirPort card can connect to an AirPort Extreme base station (AEBS).
I do understand the speed would be slightly slower than if both the base station and the card were extreme.
Since you will be using an 802.11b card, the speed will be the same 802.11b speed that you are getting now.

Using airport express to extend Time Warner cable modem wifi signal

I just today got a Time Warner Cable Arris modem with built-in wifi. I'd like to use my 802.11n Airport Express base station to extend the TWC network wifi signal to other parts of my house, but I can't get the Airport Express to shake hands with the TWC modem.
In Airport Utility, under the "Wireless" tab, I've selected "Extend a wireless network". I am able to select my TWC network under "Wireless Network Name." Wireless Security is set to "WPA2 Personal." But when I click "update" the airport express fails to join the TWC network, and my Airport Express signal disappears; I am only able to get the signal back by resetting the Airport Base Station with a paperclip.
Applecare tells me that I might be able to use the Airport Express to extend my TWC network, but they do not support that process. Is there any way to do what I'm trying to do? Are there settings in Airport Utility I need to change? I'd appreciate anyone's help.
Thank you.
Todd

You need TWO Airport units, one to function as the main radio and the other to function as an extender. I used two Express units.
Configuration is simple if you start from a factory default condition. Then connect the main Airport to AC power and finally to the Internet modem (or modem/router). Open Airport Utility on your Mac or other computer and accept all of the recommendations. After confirming that it works, insert your desired administrative and WiFi passwords.
Then connect the extender to AC power. As before, open Airport Express on your Mac or other computer and accept all of the recommendations. No need to add password info.
Do not expect the Airport to respond instantly to the configuration commands. BE PATIENT!

Connecting Cisco 2821 Router, Switch, and Cable Modem

Hey everyone,
I am currently in the Cisco Network Academy at my school and just finished CCNA 1. I have a few questions though.
I am purchasing new equipment and that equipment includes:
1-Cisco 2821 2-port Gigabit Router
1-Linksys SE3016 16-Port Gigabit Switch (unmanaged)
1-Cisco WAP4410n Wireless Access Point
1-Motorla SurfBoard Gigabit Cable Modem (no router built in-Just standalone Modem used with Comcast Xfinity High Speed Internet)
1-12U Network Rack (not enclosed)
I am confused on how I will connect the cable modem to the router and the router to the switch and the WAP so that I still have WiFi. Since the router only has 2 Ge Ports, how would I cable this up?
If my assumptions are correct, would I do the following set up?
Take the Cable Modem and run a Straight Thru to Port 1 of the Router.
Connect the Switch Port 1 to Port 2 of the Router using a Straight Thru cable (I believe I will most likely have to Subnet a network, won't I?).
Connect Switch Port 2 to WAP using Straight Thru Cable (so I still have WiFi in my home).
Connect all my computers and other devices to the Switch (this includes several PC's/Laptops, two printers that are ethernet, two TV's that are ethernet, an AppleTV and a Blue Ray Player that are both ethernet, and some Cisco Powerline Network Adapters).
Will that set up work?
Also, how would I configure the router to work with my cable modem AND act as a DHCP Server so that all of my devices get IP Addresses? I have the Cisco Command Guide Book, but it is confusing to me as of now.
Thanks!
Chris

A good start but a few points I would make.
If you set the clock manually, you may find it resets itself after a router reboot. I would look at pointing it at an NTP server:
#ntp server x.x.x.x
#clock timezone GMT (Assuming you are UK based)
Although not required, I would put a description on each of the interfaces as it may help identify them later if you are not physically in front of the Router.
#interface gi0/0
#description WAN
Same for LAN
You have set up your LAN subnet with a /16 subnet mask which is effectively 10.0.0.1 - 10.0.255.254. This is a large subnet allowing over 65k hosts which is not best practice on enterprise networks. It probably won't cause you any issues but I doubt you will have any more than 254 hosts so personally I would use a /24 subnet (255.255.255.0)
The only major thing missing is NAT which needs to be configured on the router to translate the LAN IP addresses from their 10.* private range to the Public IP address on the Gi0/0 WAN Interface.
Firstly you need to define the 'inside' and 'outside' NAT interfaces which is fairly self explanatory:
#interface gi0/0
#ip nat outside
#interface gi0/1
#ip nat inside
Gi0/0 is your outside interface because its facing the Outside world (i.e the internet) and Gi0/1 is your inside interface because its facing Inside your LAN.
Then you need to tell the router which addresses to translate against by first creating an access list:
#ip access-list standard LAN-Addresses
#permit 10.0.0.0 0.0.255.255
Finally you need to tell the router to start translating:
#ip nat inside source list LAN-Addresses interface gi0/0 overload
Oh, I have just noticed that you do not have a 'default route' configured. A router forwards packets by first looking up the destination IP address of the packet (i.e where its going) in it's own routing table. Obviously home routers are not going to have an entry for every Public IP subnet on the internet so they use something called a default route which effectively says 'If I cannot find an entry for this packet in my routing table, use the default route'.
As you are on DHCP and your IP address (and even default gateway) could change on your WAN interface, I would not bother with the next hop address in the default route but rather use the outgoing interface as below:
#ip route 0.0.0.0 0.0.0.0 gi0/0
Hope this helps!

Airport extreme base..Can i rest my cable modem on top of it?

Can I set my cable modem ontop of the airport extreme base? Or will it interfer with the base?

Short answer: YES!
As already said; it will be fine.
Nick

AirPort Extreme Plugged Into Router Connected to Cable Modem

If I plug my AirPort Extreme into an ethernet router that is connected to my cable modem, will this interfere with the AirPort Extreme's ability to operate? I ask because I thought I had read that the AirPort must be plugged directly into the signal source only in order to work. The ethernet router would not provide wireless access.
I am considering this configuration because I'm considering buying the new LG BD300 BluRay player that features streaming Netflix. The machine needs an ethernet connection to provide this feature.

It should be OK. I have a cable modem connected to a Linksys wired router: this feeds an iMac and and Airport Express, and then an iBook connects wirelessly to the Airport Express.
This all works fine for internet connection - both computers connect to the internet without problems: the only oddity arises with file sharing - the iBook can see the iMac, but the iMac can't see the iBook - possibly because it's effectively on a subnet. I haven't tried to sort this out because working one way is good enough for what I need.
But the basic connection, getting IP numbers etc, works fine.
Of course you could consider replacing the Express with an Extreme - it would be more expensive that a router, but would be a neater way of connecting: it has three outgoing ethernet ports in addition to the wireless and the subnet issue I mentioned wouldn't arise here.

Wireless router without a cable modem

Can this be done? Where i live i dont have access to a cable modem but i would still like to have a wrieless net work in my house, any sugestions?

ok, last time i tried to install a router it would not let me install it without a cable modem, so a router like the WRT610N would do what i need it to do as far as being able to install it without a cable modem correct?

Use base station as router instead of cable modem

Similar Messages

Maybe you are looking for