Why is bridge mode necessary?
I spent the last several hours unsuccessfully trying to set up a 2wire gateway to work as a bridge with my Time Capsule. From reading other posts it appears things work better the other way around, with the Time Capsule as the bridge. Before I start over again, all of this has got me wondering, why exactly is it necessary to set one of them into bridge mode? All I know is I'm supposed to, but I'm not sure why. As it stands, I don't have either one in bridge mode, and everything seems to be working fine. Will this create other problems I can't see?
From rereading your original post, it appears that the 2wire was originally set up as the main router in your system and as such, it was also supplying the PPPoE service, is that correct?
I'm not that familiar with the 2wire products, but I assume that your device has a built in modem. Do you know if this is the case?
Was the 2wire set up to create a wireless network?
Then you tried to set up the 2wire in bridge mode, but this was not successful. So I now understand that the 2wire has been returned to its original non-bridge configuration. If the Time Capsule is powered down for now, can you connect an ethernet cable from your MacBook to the 2wire as a test and get a good internet connection?
If you are able to connect using ethernet, and the 2wire was originally set up to also create a wireless network (I assume this was the case) are you able to get a good internet connection using the wireless network?
We need to make sure that the 2wire is back in its original configuration before attempting to connect the Time Capsule. Can you please review the questions above and post your reply when you can?
If your 2wire is functioning the way it was originally, all you need to do is establish an ethernet connection between one of the LAN <-> ports on the 2wire to the WAN (circle icon) port on the Time Capsule.
In AirPort Utility, the Time Capsule would connect via ethernet, not PPPoE (the 2wire is already doing this).
Connection Sharing on the Time Capsule would be set to Off (Bridge Mode)
The Time Capsule will still be creating its own wireless network if you set it up to do so. As such, you will be able to backup using either ethernet or wireless.
In this configuration, you will be able to use the wireless of either the 2wire and the Time Capsule to access the internet. Backups will occur only on the wireless network created by the Time Capsule.
Similar Messages
-
I reset my airport extreme router the other day because I was too lazy to reset the password on my private network.
I have been reading the advice found on apple support communities and wide web, but the solutions do not solve any problems and often create new ones.
I'm regretting because everything was working just fine.
But I remember having this double nat error when I first set it up a few months back, but now I cannot resolve it.
I would live with the yellow light, but it seems that this double nat error is preventing my playstation 3 from connecting to the airport extreme.
When I put the aiport extreme into bridge mode, I loose all my wireless networks, even when I reboot the airport extreme and the modem.
I try rebooting the modem, then the airport. and vice versa. No internet.
I switch back to NAT/DCHP and the internet works fine on apple devices, but not the playstation 3, and I have the 1 Double NAT error.
I have a plain stock Motorolla modem and I can dial in and see settings (although nothing about NAT). I didn't see where to see them.
I tried setting the DHCP only but it said it didn't like the settings. is there a stock range i could be using?I have a plain stock Motorolla modem and I can dial in and see settings (although nothing about NAT). I didn't see where to see them.
Exact model .. motorola make adsl, cable and probably wireless modems.. with some modems and some modem router.. we need exact info. What kind of broadband do you have?
I would note.. some of the motorola cable modems seem to have issues with the apple routers. If you are about due to change modems.. now is a good time.. not another motorola.
If the modem is a straight cable modem, the AE must be in router mode.. but you need to power down the cable modem. maybe for 20min so the new router can pick up the IP address.
You cannot use DHCP alone.. the ISP do not give you a block of IP addresses.
You cannot use bridge with a pure modem.. you will find it works.. but only to one device.
The only reason you get double NAT is the failure to pick up the public IP.
Give the info required..
If you have trouble, I need the actual IP of the modem. the actual IP of the AE WAN port when plugged in. Screenshots are good. -
How to put the Motorola NVG589 in 'bridge mode' (or as close as you can).
OverviewMost people don't need advanced features that personally owned routers offer and will be just fine using the NVG589 and turning off their personally owned router. But if you're like me (and I know I am!) then you are probably reading this thread because you have ip cameras, personal clouds, photo servers, guest wifi, VPN's, xbox, QOS settings, et al. I have an ASUS RT-N66U , a VIP2250, and a wireless reciever with a WAP; but your settings should be similar. The NVG589 does not have a simple 'Bridge mode' setting so you will need to get into weeds to get this working. I hope you're ready. First StepsMake sure you have a laptop or a computer that you can connect directly into the NVG589.Unplug all ethernet cables from the NVG589 except for the one going into the aforementioned laptop.Write down the MAC address of your personal router (the WAN MAC address if you see different ones for LAN and WAN) Settings on the NVG589Login to your NVG589 by going to 192.168.1.254Go to 'Home Network' then 'Subnets & DHCP'. Your password is on the side of the modem.If your 'Device IPv4 Address' is the same subnet as your local router, I suggest changing it. I changed mine to 192.169.2.254 but you can stick with whatever you like / need. My subnet Mask remains at 255.255.255.0Change 'DHCPv4 Start Address' to 192.169.2.1 (or whatever your above Device IPv4 address is but with a 1 at the end instead of .254)Change 'DHCPv4 End Address' to 192.169.2.5, Just a few more than the Start Address. We need these for any WAP extenders for wifi TV's. It's important that you only have the laptop plugged into the ethernet at this point.Click 'SAVE' at the bottom.Go to 'Home Network' then 'Wireless' and turn wireless off. You want to use the wifi on your own router right?Go to 'Firewall' then ' 'Packet Filter'. Disable Packet Filters. Again, we want our router to do the work.Make sure you don't have any of your own settings turned on in 'NAT/Gaming' (don't worry if you see 1 in there already that you can't delete).Go to 'Firewall' then 'IP Passthrough'. For 'Default Server Internal Address', select or type in 192.169.2.1.For 'Allocation Mode' select 'Passthrough' (I had to do it in this reverse order to be able to type for some reason)For 'Passthrough Mode', select 'DHCPS-Fixed'Type in the MAC address for your router under 'Manual Entry', lowercase is fine.Click SAVE. It will tell you that it needs to reboot. Hang on for a minute.Go to 'Firewall Advanced' at the top and turn everything OFF.Near the top of your screen, you should see an option telling you to reboot the router. Go ahead and do this now. It takes about 2 minutes.Personal Router Settings.
Unplug your laptop and plug in your personal router while the NVG589 reboots. Plug your laptop into your personal router and login to it. For me, it was 192.168.1.1 (hence why I changed things above)For the ASUS RT-N66U, I had to go to my WAN settings, then 'Internet Connection'.Change 'WAN Connection Type' to 'Automatic IP'. This will give your personal router the external IP of the NVG589 and is the key to making this whole thing work. Some folks will have to manually enter in an IP and this can be found under the 'Broadband - Status' section of the NVG589 settings. If you don't have 'automatic IP' then I feel bad for you since you will have to manually change this every time your IP changes.'Enable WAN', 'Enable NAT' and 'Enable UPnP' is all set to YES for me. I recomend Setting your own DNS server. I use Google's but you use whatever you like. Google's is 8.8.8.8 and 8.8.4.4'Account Setting - Authentication' is 'None'.There are no Special requirements from ISP at the bottom.Hit APPLY at the bottom and your router will reboot.I also changed settings in my IPTV under LAN:Profile was None.Choose IPTV STB port, I set to LAN3 & LAN4. I plugged my U-Verse WAP for the wireless reciver into the NVG589 and I plugged the ethernet cable going to the VIP2250 into LAN3 on my personal router. I'm really not sure if this was necessary but I'm having 0 issues with this setup. I initially tried putting the WAP on my personal router but had issues so I stuck it back on the NVG589 and it's fine. I could probably just plug the VIP2250 into the NVG589 as well but I'm just enjoying the small victory of using my personal router for now. Hit apply at the bottom, another possible reboot.At this point, I checked the internet and everything was working great through the router. I restarted by 2 TV boxes (the VIP and the wifi ones). Everything is peachy. Your mileage may vary. Good luck. EDIT to update WAP configuration.a couple of notes I would like to make on this. for the most part it's correct. Bullet 1.) 192.169.2.254- I would not change it outside the 192.168.x.x class network specification. Doing this can cause some connectivity , DNS, and routing problems going outside the class. Example (and yes I did this once!)-- I changed my base IP address to 135.153.1.1 as well as changed everything else. Everything worked ok till I do a traceroute or a path ping. This problem was really pervasive when on my iphone, speed tests would be way, way off, and wireless would sometimes have problems connecting. many times the first hop which should be my router didn't resolve properly and I also created other DNS problems (page can't be displayed, etc...) For this example I would stay within the confines of the wikipedia entry for private network. http://en.wikipedia.org/wiki/Private_network it states24-bit block10.0.0.0 - 10.255.255.255 16,777,216
single class A network
10.0.0.0/8 (255.0.0.0)
24 bits
8 bits
20-bit block
172.16.0.0 - 172.31.255.255 1,048,576
16 contiguous class B networks 172.16.0.0/12 (255.240.0.0)
20 bits 12 bitsof course the common block everyone with a router uses.
16-bit block
192.168.0.0 - 192.168.255.255
65,536
256 contiguous class C networks 192.168.0.0/16 (255.255.0.0)
16 bits 16 bits
In this addendum I would say use
192.168.2.254 or 192.168.168.10.254172.16.0.1 or 172.17.0.110.20.1.1 or 10.30.1.1 Either or would be fine. Avoid the headache I created and stay within a private network setting. most DNS boxes already know what the private networks are. If you stay within the confines of them you are not adding frustration to your cause. bullet 3 to bullet 5.) a tweak of subnets and IP's Now you can leave this at 255.255.255.0 /24 (default) which would give you 254 Ip addresses on that NVG589 to use. however if you are not going to use them just eliminate them. Much less work on broadcasting that the router will have to do. Since you are passing the IP right to your router anyway save the work for the router behind.for instance if you want a shorter range255.255.255.240 would allow 14 IP addresses total this can also known as 255.255.255.240 /28255.255.255.224 /27 This would allow 30 IP addresses total
what you essentially do is cut down on how many hosts you actually have. Essentually you are making the NVG (as well as any router made by any manufacturer) smarter buy giving it a short phone book to work with. An example below for the NVG589device IPv4 address: 172.21.0.1
DHCPv4 start IP address: 172.21.0.7
DHCPv4 end IP address: 172.21.0.14
Subnet mask: 255.255.255.240 DHCP addresses available: 8Static IP's available: 5
Another example I would usedevice IPv4 address: 10.20.1.1
DHCPv4 start IP address: 10.20.1.5
DHCPv4 end IP address: 10.20.1.30
Subnet mask: 255.255.255.224 DHCP addresses avaialble: 25static IP addresses available: 4
Another example using 192.168.x.xDevice IPv4 address: 192.168.15.1
DHCPv4 start IP address: 192.168.15.5
DHCPv4 end IP address: 192.168.15.30
Subnet mask: 255.255.255.224 DHCP addresses avaialble: 25static IP addresses available: 4 Note: I do not count the base IP address as a useable IP (another headache I learned to avoid the hard way). Continue on: From the bullet point of Go to 'Home Network' then 'Wireless' and turn wireless off. You want to use the wifi on your own router right?I would continue on. Final note: I don't get here all the time to check and see who replied so if there is any questions please drop me a line as I don't come here very often. Thanksdavid -
AT&T UVerse, Time Capsule, and Bridge Mode
I know that this topic has been touched on, but I've yet to find a solution to the problem I'm having with my Time Capsule. I am an AT&T Uverse subscriber which means I have their big residential gateway (RG) modem/router/VoIP/TV box in my house. I also have a 1st gen Time Capsule (TC) and an 8-port gigabit switch to feed ethernet to the wall jacks throughout my house.
What I'm trying to setup is to have the RG provide 802.11g, the TC provide 802.11n, for the TC to feed the gigabit switch to bring 1GB ethernet to all of my wall jacks, and for everything on g, n, and ethernet to be able to see each other. I originally was using the TC alone with DMZ+, but now that I actually have some wireless-n devices, I'd really like to separate the two networks (I have a wireless-g printer and a macbook that will slow it all down).
I tried putting the TC in Bridge mode, made an n-network and a g-network, and turned off DMZ+. The result was that RG connected devices could see into the TC connected devices and had Internet access, TC connected devices could not see out past the TC or get Internet access, except Bonjour devices were able to see each other (I have a wired Mac Mini on the TC, which could see the MacBook even when connected to the RG by wireless-g).
Basically, I'm trying to set up the RG as my router with 802.11g, and have the TC as a switch providing GB ethernet and 802.11n. Is this possible?
If I had the 2nd gen TC then none of this would be necessary since it has the dual radios, but I'm trying to make due with what I"ve got!
Thanks in advance for any help.As I understand home routers/switches, even though the RG is only 100Mb ethernet, devices on the Gb switch will communicate with each other at GB speeds as managed by the switch.
You are correct. I interpreted your statement to mean that you wanted Gigabit throughout the network. Devices connected to the TC would indeed have the benefit of Gigabit available.
I have another idea. You are configuring what is known as a "roaming" wireless network. The requirements here are that the TC be in "bridge mode" (It is) and that you use the exact same wireless network name (you probably are), security and password.
Can you check the wireless security settings on the Uverse router? ATT may use different terminology. For example, you might have WPA2 Personal selected as security on the TC, but maybe something like WPA-PSK (TKIP) on the Uverse. If the security settings on both routers do not match exactly, you really have two distinct networks and they will not function as one.
That might explain why you see some devices from one router and but not the other. What security settings do you have on both routers? -
Is it ok to use Westell 6100F in non-bridged mode with Linksys router?
I'm a new Verizon DSL customer.
After several attempts I was only able to connect my Verizon 6100F modem with my Linksys wired router in non-bridged mode. I just changed the IP address in my router, and then released and renewed. I did this just yesterday and the connection is fine...so far.
Fyi, I'm using the Linksys for its firewall. I don't need wireless.
Since I didn't bridge the modem, I assume I'm basically using two routers, the 6100F and the Linksys. Will this cause me issues in the future?
I need to decide whether to try again to bridge the modem or just leave it alone.
Thanks.dslr595148 wrote:
Yes, it is ok.
Here are things that I have ever heard of what can happen (or happens) with Double NAT:
#1 Might not possible to get online, depending on the LAN IP of both routers. But it sounds like you already solved that issue.
#2 NAT and Double NAT cause lag/latency.
I point to two source(s).
a) URL: http://www.dslreports.com/faq/15872
Title/Location: All DSLR (dslreports.com) FAQs » AT&T Southeast Forum FAQ » Motorola Info » How do I properly set up a Motorola 2210 with a Netgear router.
b) As to why that theory/concept is true, go to http://www.endlagnow.org/ELN/TakeAction_TopTips.aspx
and read tip number one, there.
#3 If you want to allow users from the net to connect to you, I point to..
http://www.portforward.com/ -> Other Guides -> Port Forwarding Behind Two Routers?
#4 http://kb.netgear.com/app/answers/detail/a_id/992
Where they talk about Double NAT, VPNs, and visiting secure (SSL) sites.
#5 Some routers may or may not show up when doing a trace route to the outside.
Another problem with double-NAT is some screen sharing methods may not work. Such as Apple "Back To My Mac".
Using and troubleshooting Back to My Mac in Mac OS X 10.5
I just logged on to this forum to see if I can find the necessary steps to turn my Westel 6100F up to "bridge" so I can use my Linksys WRT54G2v1 as the only router on my home network.
PS, I'm subscribing to this thread in case anyone has a link to step by step for setting this up on the Westel 6100F (I can handle the Linksys end of things).
{edited for privacy}
Message Edited by ElizabethS on 07-11-2009 01:30 PM -
Why does Bridge open raw files (ndg) in Raw window even though the 'Open in Photoshop' option is...
I don't understand why in Bridge there are 2 choices, -1- Open raw and -2- Open in Photoshop and yet both choices give you the same result--The raw window opens with PS below it. After having worked on my raw NEF files I save it to dng. My thinking behind this, is that I alreay have done what was needed and would now like to start working on it within Photoshop. It seems that the only way to automatically open it directly within PS is if I save it as a tiff, psd or jpg. But since this is not what I want to do then why must I add extra steps as opposed to just opening it hwere I want. I mean the 2 choices are there, so why not do what it is being asked?
If I may step in in this discussion, I always use DNG but never have used ACR to achieve this result.
As Curt stated the changes made in ACR to a Raw file (or for that matter a DNG file) are undoable without problems.
My workflow (using Canon CR2 but that is not important, let's say a dSLR generated Raw File) is to use Photodownloader in Bridge (not perfect by far but still the best and easiest way for me).
I connect my CF card using a card reader and let Adobe Photodownloader do the work.
Inhere I use several options:
- convert the CR2 file to a DNG
- back up the original CR2 on a separate disk
- rename the DNG to yyyymmdd (shot date) and sequence number
- add a metadata template for copyright to all the DNG files.
Sorting out the keepers I open the DNG in ACR and either hit Open (for open directly in PS) or use save as Tiff or PSD depending on next step in development or simply hit Done to apply changes and leave it for later use.
The advantage of having both ACR in PS and Bridge is huge. The only difference between both is that by default PS has the Open Button selected and Bridge (open in Camera Raw) has the Done button selected, thats all.
But here is the good part, you can use both simultaneously! For example have PS in film strip mode with multiple files selected and when changes are ready hit Save as start the process but locks up PS itself. Switch to Bridge and use Open in Camera Raw and start with the next job while ACR PS is still running in the background
When I open a DNG in PS using ACR in either PS or Bridge I continue developing with actions and fine tune with layer mask, brush etc etc.
Sometimes use Save As for PSD with the layers still active (huge files) when needing to revisit or not quite ready. But mostly I use an action to flatten the files and save as PSD.
Both DNG and PSD are ending up in my archive, my clients receive whet they want, PSD, Tiff but mostly jpeg and resized.
When having the job finished and every once in a while I clear out the original CR2 files from Back up because in all the years I use DNG (at least 5 years) I never had to use the original CR2 instead of the DNG that is thoroughly backed up as is the original PSD.
But since disk space is cheap you can choose to keep them.
An other option is to include the original raw file in the DNG but I would not recommend that because the file size is getting almost twice as big.
The biggest plus side for me using DNG is that the xmp data is written directly to the file while original CR2 or NEF needs an xmp side car file next to it with this data.
However saving changes to metadata is taking a bit longer to a DNG then to an XMP side car file, depending on system resources and time this never been a real problem for me -
How do I clean up my new FIOS connection? I just cahnged ISP Fios and they reqquired a router of thier own in front of my AirPort Extreme. Since then I have blinking yellow light on the AirPort and AirPort utility keeps promting for an edit. Suggests canging from NAT to "Bridge mode". Obviuosly U have some internet or this post would not go anywhere, my knowledge base is not enought to feel comfortable with changing the settings. Correctly editing can be tricky, so how do I make necessary changes?
How do I clean up my new FIOS connection?
The FIOS router needs to be in Bridge Mode to prevent the Double NAT error from occurring when two routers are both fighting with each other for control of the network.
Unfortunately, the likely problem from the FIOS side is that FIOS support will either tell you that their router cannot be configured to operate in Bridge Mode, or if it can, they will not tell you how to do it.
But, it could not hurt to check with FIOS to see if anything might have changed recently in this regard, so your first call would be to FIOS support.
If you cannot change the FIOS router to Bridge Mode, the alternate plan would be to change the AirPort Extreme to Bridge Mode. If you are using the Guest Network feature on the AirPort Extreme at this time, that feature will not work correctly when the AirPort is set up in Bridge Mode. -
New Airport Extreme in Bridge mode -- some devices have no internet access
I just bought a new Airport Extreme as my old one which was probably 7 years old required restarting every day. My setup is as follows: DSL cable modem to Linksys Router (for a long set of convoluted reasons, I can't remove this layer) and then Airport Extreme. This is how I had it set up with my old one. The only difference is I recently started looking into using "Back to the Mac" on MobileMe and in order for it to work, I set my new Airport Extreme to Bridge mode due to dual NAT. I have an iMac, PC, MBP, MBA, iphone 4, AppleTV and ipad. All was working fine last night when I set it up. 24 hours later, for some odd reasons, I can't have my PC accessing the wireless network at the same time. If I did, it would knock my iMac off the network and says some other device is using the same IP address. For a while, only my iMac (my main computer) can access it and even my iphone can't. At this very moment, my iphone, imac and MBP all have access to the wireless network. My MBA and iPad has no internet connection. I've restarted Airport Extreme, Linksys, and modem more than once... If I switch back to "Use Public IP Address" instead of Bridge mode, everything works except for "Back to the Mac"... Help!
Hey Bob, Thanks...I have already repeated that multiple times yesterday and today but to no avail. I tried to get into the Linksys router control panel but unfortunately we can't remember the username and password (the router is not mine). The make things even more complicated, the router is actually part of the internet package provided by the ISP and they use a PPPoE to log in. Theoretically, we could do a hard reset but the problem is the ISP will not release the PPPoE information unless we sign a long and complicated form saying we want to bypass their Linksys router. We can do that but this process will take days and weeks... Our ISP confirmed that the Linksys router is set to max out at 5 DHCP but we can only connect 3 machines at a time. They are coming out to take a look tomorrow but in the meantime I have reset the Airport Extreme to "Distribute a Public IP Address" mode which will allow access to all computers/devices. What's even more weird is that if I did the Bridge mode, it messes up the Linksys router's own network as well. We can't even just sign into that network... Any ideas why?
-
Is it possible for SA540 to work in transparent bridge mode?
Hi all,
I've been considering to use a Cisco SA540 in an industrial project; please consider Scenario 1 and 2 files attached (bear with me - I'm an engineer, not an artist).
All networks mentioned in both scenarios are regular and well known Ethernet TCP/IP networks. The Corporate Network and Automation Network (including the DMZ) are in different subnets. The Corporate Network is the biggest one, similar to any company's corporate network you all know. The Automation Network exists for the purpose of operating and maintaining the industry process; it's smaller but highly critical. Only specific staff (automation staff and dedicated operators) have access to it. Although many devices and networks in the Automation Network are industry specific - not so well known, a small segment of it is plain Ethernet TCP/IP, as I've already stated. The Automation Network has a DMZ, where we lay servers that provide industry process information for the Corporate Network.
Scenario 2 may look at a first glance the best option, since it's simpler, doesn't require another router and benefits from Cisco SA540 support for both a LAN and a DMZ. The problem with Scenario 2 is the following:
Since both networks are maintained by different teams under different management, TI staff would have absolute control over the Cisco SA540. This way automation staff could not grant that the Automation Network is really protected from the Corporate Network.
TI staff may even demand for another device to interface with the Automation Network - which is not Cisco SA540, since they rule everything that lives in the Corporate Network. In this case, I have my hands tied!
Scenario 1 solves the above problems. Since automation would have absolute control over the Cisco SA540, they could grant security for the Automation Network (except for DMZ, but that's the reason why it is called a DMZ!). TI staff could ask for any router they prefer to interface with the DMZ, I would never mind about it.
Considering the above, I will probably be forced to adopt Scenario 1 instead of Scenario 2. So here comes my question: is it possible for Cisco SA540 to work with the same subnet for both WAN and LAN interfaces (in Scenario 1, no DMZ interface is required)? In other words, is it possible for Cisco SA540 to work in transparent bridge mode? I've been through all of the Cisco SA540 Administration Manual and as far as I could understand, routing is not an option - it is demanding.
Although I understand I could adopt Scenario 1 and still have different subnets for DMZ and the rest of the Automation Network by connecting the DMZ to the WAN interface and the rest of the Automation Network to the LAN interface in the Cisco SA540, I believe it's not worth the effort. The Automation Network is so small and we do all we can to keep it as simple as possible.Adriano, there is a RV042G, which supports the gig ports and a 800 mbps nat throughput. Here is the datasheet
http://www.cisco.com/en/US/prod/collateral/routers/ps10907/ps9923/ps12262/data_sheet_c78-706724.html
If you are using a DSL connection, the SRP527/547 models may be an alternative. These models support the RFC 1483 Bridges EOA Please note the SRP547 should be 10/100/1000. Also note the SRP521/541 are Fast Ethernet units and they do differ from the SRP527/547. The main selling point of these devices are the FXS/FXO ports. So this may also be a bit of an "unfocused" solution. But it's worth throwing the idea out there!
Here is the admin guide;
http://www.cisco.com/en/US/docs/voice_ip_comm/unified_communications/srp540_series/administration/srp500_AG_2567701.pdf
Here is the datasheet;
http://www.cisco.com/en/US/prod/collateral/voicesw/ps6790/gatecont/ps10500/data_sheet_c78-550705.pdf -
I am trying to setup timed access mode on my airport extreme in order to limit the times devices can connect to my network, but I am having some trouble.
My setup is as follows Cable Modem ---> Airport Extreme ---> Netgear router
The Airport is running DHCP and the Netgear is in bridge mode. The only purpose of the Netgear is to provide a wireless access point for older b/g wifi devices. The Netgear is connected to the Airport by an ethernet cable from one of its LAN ports. All ip addresses are supplied by the Airport.
When I list a device mac number in the Airport extreme's timed access table it does seem to block the device if the device trys to connect to the airport's wireless service, but the device is still able to obtain service through the Netgear wireless service. I want the device to be blocked on both wireless networks. I thought this would work since all DHCP is on the airport. Why is the Airport allowing the device to connect when it comes in through the Netgear?
In this example the device I am trying to block is 5c:59:48:ba:28:d2.
Looking at the log on the airport I see the following entry when the device (when permitted) connects to the airport wireless
Nov 30 22:43:12
Severity:5
Associated with station 5c:59:48:ba:28:d2
If instead the device connects to the Netgear wireless I see the following log entry on the airport (this connection gets through even if the mac address above is listed as blocked on the airport)
Dec 01 10:46:29
Severity:5
Connection accepted from [fe80::223:12ff:fe29:acfe%bridge0]:54774.
It appears that the Netgear router (while bridging the network) is somehow modifying the mac address format in a way that the airport does not recognise it as the device to block.
What can I do to fix this?
Thanks.The Netgear wireless server has control over what what devices are allowed to connect.
Unless you tell the Netgear what devices you want to allow to connect, it will allow any wireless device to connect as long as it knows the wireless network password.
IF.... .you were using two AirPort Extremes, and not a Netgear, the two Extremes would communicate to each other....so you would only have to enter Timed Access settings on one router and other AirPort would automatically pick those settings up.
But, even this was not the case until the last year or so when Apple updated firmware. A few years ago, you might have had 2 Apple AirPort Extremes on the network, but you still had to manually set up Timed Access on both devices separately.
Bottom line, you need to setup the equivalent of Timed Access on the Netgear router. -
How to plug a hard drive on the USB port of a Time Capsule. TC in bridge mode
Hello
I would like to connect a hard drive onto the USB port of a Time Capsule. This is for saving files (different frome the Time Machine savings). I am struggling to get it working it seems that I can see the HD when under "drives or discs" (running Snow Leopard in French) from the AirPort Utility but I can't access to it.
The TC is in bridge mode.
Thanks for help and guidances.
Best
PierreThe question is clear enough.. I just don't understand why you are having issues.
Can you see in the internal disk of the TC in the finder?
What format are you using on this disk? Try and format it HFS+ if it isn't already.
If you plug it directly into the Mac it works ok??
The other issue is the need for a powered hub on the TC due to the low power it gives the internal port.. or lack of bios compatibility with a range of usb hub chips. Try a powered hub as that can also help. -
Hello, is it possible to share an external hard drive over a network when I have my Airport Extreme in bridge mode? I can't use my AE as my main router at the moment but still want to be able to use the hard drive on the network, and the router I am using isn't capable of adding an external hard drive. I use Windows 7 and the other router is a Netgear. I have searched the communities and have not come across an answer to this question. I have tried several configurations within windows to try and see the hard drive but none have worked. I can see the hard drive when I run Airport utlities, but it cannot be seen on the network. Thanks to anyone who can help!
I think there is some confusion in this thread..
If you are sharing on a local LAN port forwarding is not required.
is it possible to share an external hard drive over a network when I have my Airport Extreme in bridge mode?
Answer is yes.. no port forwarding, mapping whatever term is used.. is needed. Port mapping is required when you cross over a NAT router.. as long as all the devices are inside a single LAN.. then no port mapping.
I assign to my Airport Extreme, do I do so with the settings of:
Service: SMB
Type: TCP
Server IP: xx.x.x.x
Port Start: 445
Port End: 445
This would not work even from WAN.. SMB is blocked by all responsible ISP.. there is simply too many unprotected windows machines out there. If they allowed SMB .. the world would be flooded with hijacked bots. And stolen data like bank accounts. SMB is not a secure protocol.
But this is not necessary on a LAN.
The problem can be Mavericks which does a terrible job presenting network drives.. The usual recommendations are to use AFP or force the connection to CIFS (ie SMB1 not 2).
If you use airport,, then use AFP.
In finder.. Go, Connect to server.
AFP://AEname or AEIPaddress. (replace with the network name of the AE or its actual IP address).
When asked for password.. type public if you did not change it or use whatever password you put.
Store the password in the keychain. -
E4200/E3200 in bridge mode...Guest access works, but does not roam between routers...any ideas?
I have installed wireless in my church...main router is E4200 in the office set up as follows:
IP: 192.168.0.1
Subnet: 255.255.255.0
DHCP enabled (Range = 192.168.0.4-192.168.0.103)
Guest network enabled
Static DNS (for content filtering)
NAT: Enabled
Second router E3200 (in bridge mode) - connected LAN to WAN
IP: 192.168.0.2
Subnet: 255.255.255.0
Guest Network enabled
DHCP (obviously disabled)
Static DNS (for content filtering)
NAT: Enabled
Third router E3200 (in bridge mode) - Connected LAN to WAN
IP 192.168.0.3
Subnet: 255.255.255.0
Guest network enabled
DHCP (obviously disabled)
Static DNS (for content filtering)
NAT: Enabled
The 2 routers in Bridge mode are connected to a 16-port unmanaged switch (with other PCs, etc.), which is then plugged into the main router in Port 1.
SSIDs on all 3 routers are exactly the same for both main and Guest networks.
The main network works flawlessly. The router in the office hands out IPs in the 192.168.0.XX range and you can wander throughout the church and maintain a persistent Internet connection. File and print access works fine too from anywhere in the building.
For the Guest network, you can set up a laptop next to each router, obtain an IP address, reach the logon page and surf the Internet without issue. So, the Guest Network works fine from each router.
However, if you wander around the church while on the Guest network (such as with a smart phone), the following happens:
-On either of the E3200 routers (in bridge mode) you get the login page as you wander into the range of each router. I would have thought that if you logged in once, you would be good to go.
-You get a different IP from each router. On the E3200's in Bridge mode, you get a 192.168.33.XX address. Additionally, the gateway is 192.168.33.1. On the E4200 (main router) you get a 192.168.3.XX IP and a gateway of 192.168.3.1.
-As a result of getting different IPs, the smart phone becomes confused and generally won't connect to the Internet.
So, it looks like each router maintains a separate list of who has entered the correct password to get onto the Guest network. Additionally, it appears as if each of the 2 routers, supposedly in Bridge mode, is still handing out IP addresses on the Guest Network, rather than deferring to the router in the office like they do for the main network.
I have seen a lot of postings about how to put routers into Bridge mode and problems with the Guest Network, but posts that I've seen point to the Guest network not working at all, as opposed to this issue where it works; the bridged routers, though, continue to like to hand out IP addresses on it, making wandering around the church while connected to the Internet not possible while connected to the Guest network.
Anyone else experience as similar situation? Any possible solutions out there?
Thanks!
-Gil
Solved!
Go to Solution.I do understand what you were trying to do here since you would like to have only 2 SSIDs (main & guest) for perhaps easy connectivity. The reason why you were not having problems getting online wirelessly when you were connected to the main network it’s because the computer was connected to only one DHCP server since the 2 bridge routers were just acting as a switch or a passthrough device. Now with guest network access it is a different scenario, a guest network is a virtual network meaning to say it’s like your having another router embedded on your router. Since it is a virtual network, then it does not follow the parameters of the main network, hence even if the router was set to bridge mode those routers will still have their own ip address of either 192.168.33.1 or 192.168.3.1.
-
Airport in Bridge mode "not a supported format." Are you F'n kidding me?
Forgive me if I'm freakin' a bit but I am at my wits end with Apple. Here's the breakdown.
Fiber DSL into a standard wired 4 port D-Link router. Router is connected to HP 24 port switch because the D-Link does not have enough ports for my house. Switch feeds cat5 to all rooms in the house. Airport Extreme (newest version) is in living room and set to Bridge mode. I use it to connect multiple items in my entertainment area and wireless access for the Macbooks and iPhones.
Up to a few weeks ago I was connecting my iMac via wireless but got sick of the connection dropping (pings would be unresponsive for minutes on end). I ended up moving my desk and plugging into a cat5 port on the wall. Well guess what... it's still dropping. OK, I removed everything from the network and started adding things one at a time over the past few days. Everything was running better than ever until I plugged the Airport back into the network. Mind you, I'm not running my iMac into the Airport, it is simply on the same network.
After shaking my head for a while I called Apple. Well I just got off the phone w/ Tier 3 tech support for the Airport Extremes. I tell them that I have no idea why, but I'm only dropping connections when the Airport is on the network and I'm just curious if there is something in the settings that I'm missing. This is where it gets good... The brilliant Tier 3 "Technician" tells me that I am running an unsupported configuration because the Airport is running in bridge mode and it's attached to a wired router across the house. He says that if the D-Link router was also wireless he could help me. I asked what the difference was if it was wired or wireless but all he could say was he couldn't help me because it was a unsupported configuration.
So - I'm ready to send all my CrApple gear to some poor kids on the other side of the world. Anyone have any ideas here?Bob Timmons wrote:
I'm reading the original post with the understanding that the AirPort Extreme is connected by ethernet to the network and the replies indicate that as well.
Are you saying that if the Extreme is in bridge mode connected by ethernet that the ports are not active?
Not at all. What I was trying to say was that the connection from the Extreme to the internet must go through the WAN port, not a LAN port. In a large network, this can happen unintentionally. For instance, suppose a client has Internet sharing enabled and is connected wirelessly to the Extreme and by Ethernet to another router. Then the internet connection from the other router would be shared with the entire subnet, including the Extreme through its LAN port. This could cause problems with the network.
However, with the network setup Jerastan describes, this does not seem to be the cause. -
Extreme in WPA2 and Bridge mode
Extreme (802.11n) that we want to use as Access Point. Latest firmware v7.4.1.
Setting the Extreme up with no wireless security let me connect users wirelessly with the Extreme in Bridge mode. Using WPA/WPA2 only works when the Extreme is not in Bridge mode. Using Bridge mode and WPA/WPA2 causes complete loss to the unit, even with Airport Utility.
ThanksThe Verizon modem/router is already providing DHCP and NAT services for the network.
If you have the AirPort Extreme that is connected to the Verizon modem/router also setup to provide DHCP and NAT, as you state, then you have two devices both trying to provide routing services for the network.
You only want one device providing DHCP and NAT for a network.
You are likely not getting DHCP IP address conflicts since Apple uses a different DHCP range than Verizon, but with both devices providing NAT services, it is easy to see why you are picking up the Double NAT error.
All of your Apple devices need to be in Bridge Mode if you want to avoid the Double NAT error.
Maybe you are looking for
-
Hello, does anyone have an answer to this problem ?
-
Where the new data's are placed first ?
Hi, I have created the database of TimesTen as per the steps in http://download.oracle.com/otn_hosted_doc/timesten/1121/quickstart/html/admin/db_ops_createdb.html using Data Source Name (DSN ) Placed data in C:\TimesTen\Database Placed log in D:\Time
-
Package for payroll what is the problem in this..
Specification CREATE OR REPLACE package PKG_PAYROLL as type cur is ref cursor; procedure pro_getstate(p_cid number,p_cur out cur); procedure pro_getcountry(p_cur out cur); procedure pro_getdesignation(p_cur out cur); procedure pro_getdepartment(p_cur
-
is this tool integrated with the data quality tools or do most people use third party - looks like we need some address cleansing
-
Need display advice 23 or larger
looking for a display, 23 inches or larger. My budget is $400.00. I can find plenty of used Apple Cinema Displays used for $400 in 23 inches, but these are of course older models and I question how they will look/hold up next to another manufacture