Wireless and guest network and HREAP

Hi,
I have inherited a wireless infrastructure which comprises of a head office with WCS and WLC plus LWAPP access points.
There is a sub office in another town who wishes to deploy a wireless infrastrucure and it struck me that as they only want to deploy a couple of AP's that HREAP would be good to use in this senario.
However they want to also use the guest wireless network that we have in the head office but I dont want their guest traffic to come to our DSL modem that we have set up for the HO guest wireless. The two offices are connected via an MPLS link which doesnt need anymore traffic on it.
Is there a way of configuring the HREAP and the WLC and WCS so that the sub office breaks out locally for guest and yet the lobby admin at HO can control the password?
Many thanks,

Hi Nell,
the feature you are looking for is "H-REAP local switching".
So you can set the remote AP to H-REAP mode (which optimizes it for "behind a WAN link") and from there you can set several ssids as "local switching".
this means that everything about the authentication phase is handled by WLC but after authentication, the traffic is dropped locally at the AP and doesn't transit through the WLC.
The guest SSID has to be enabled for local switching and then, on the H-REAP APs, go in the AP configuration (from WLC "wireless" tab, then click on ap) and in the hreap tab, you can configure the vlan where the guest traffic will be dropped on the remote site. It must be a vlan that exists on the remote site and users will get a DHCP address on that vlan.
Regards,
Nicolas

Similar Messages

Extend both main and guest networks with a 2nd Time Capsule?

I have a 4th generation 2TB Time Capsule set up to broadcast primary and guest networks. I am running out of storage. I would like to increase my storage and I would also like to extend both primary and guest networks.
I currently use an older Linksys router (WRT330N) operating in bridge mode (wired connection to the TC) to extend the primary network, but it does not extend the guest network.
If I purchase a second (5th generation) Time Capsule to replace the Linksys, can it be set up to extend both the primary and guest networks?
From searching the forum, it appears not, but I'd like to confirm. Is true for both both wireless and cabled range extension options?
If I'm not able to extend the guest network this way, I'm inclined to settle for extending the primary network as I currently do and look for other ways to increase my network storage capacity (e.g. by upgrading the drive in my existing TC).

If I purchase a second (5th generation) Time Capsule to replace the Linksys, can it be set up to extend both the primary and guest networks?
Yes, either using wireless or an Ethernet connection between the two Time Capsules, providing that the 4th Gen Time Capsule is running at least firmware version 7.6.3.
A wired Ethernet connection between the two Time Capsules is highly recommended. If you plan to extend using wireless, the second Time Capsule will need to be located where it can receive a very good signal from the first.

Extending Time Capsule primary and guest networks with 2nd Time Capsule

Hi
I have two Time Capsules. The first is configured to run a primary and guest network. It is connected to an ADSL modem. All of this works fine.
The second Time Capsule is cable connected to the first, in a 2nd location (a next door building).
I want the 2nd Time Capsule to extend _both_ primary and secondary networks in its location.
How do I configure the 2nd Time Capsule (and the first if there is anything I have to do there to get this to work).
Please! and thanks...
Graham

Sorry, but the Guest network cannot be extended either through wireless or Ethernet.
If you would like to see this feature in a future product, you might want to let Apple know
Apple - Time Capsule - Feedback

Lost my guest network and VOIP is no longer....

Hello peeps,
So, this is what I DID have going on (sorry for any incorrect terminogly, I'm not overly techi)..
Centurylink Lynx 220 modem, 3rd gen TC linked to that and from the TC I HAD my VOIP (voice over internet phone?) working just fine. 2 wireless networks, one as the household main and a guest network for......... well, guests lol..
I have been spending a massive amount of time on the phone with centurylink just of late, we pay for 8meg downloads butwhen doing speed tests we were lucky to get 1meg. So, we got a new modem....
and this is what I have NOW....
Westell 7500 Modem, 3rd gen TC linked to that, bloody VOIP is NOT working, LOST my GUEST network and for love or money I can't add another one, that option seems to have completely gone AWOL.....
On the plus side, speed test now shows 7meg of download speed..
Any idea on what has changed? other than the modem change?? could that of made that difference? Any idea on how to get my life back??
We love the option of the guest network as we can turn it on and off for my Son.. Good boy = ON Bad boy = OFF haa haaa haaa how I love that power
Any info would be great.. Thank you

Guest network apparently.. (I haven't tested) does not work in bridge mode on the TC.
https://discussions.apple.com/message/12853944#12853944
As that is the case you must run the TC as a router. Update to latest firmware and latest utility if not already maybe a help.. or a hinderance if you are already there.. visa versa .. go backwards.. Apple don't get them right all the time.
Secondly the modem should be in bridge and using PPPoE client on the TC so it is a full router. This may solve the voip issue as well since your modem may not be setup correctly for voip.

Timed Access controlling Main and Guest Network

I have a Time Capusle 4G running software v7.5.2. I am running a Guest Network as well as a closed network.
In the Timed Access window i have default set to "no access". Then, all the computers that are allowed access to the main network are on the list. My guest network is broadcasting but when a user tries to connect to it, they get an "Unable to connect" message. If I change the default access in Timed Access to "Everyday", users are then able to connect to the Guest network again.
Obviously, this is a bug/missing feature and has been for several software revisions. I don't want people accessing the main network that aren't on the timed access list. However, I still want guest users to access the Guest Network, without using MAC address filtering on the Guest Network.
It looks to me that the Timed Access window is controlling the restriction of the Guest and Main network. Which renders the Guest Network feature pretty much useless.
Hopefully this will be addressed in the near future. If other people are experiencing this problem, Please let me know.
-Ghost

It looks to me that the Timed Access window is controlling the restriction of the Guest and Main network.
Your observation is correct. Access control using Timed Access is an ALL or NOTHING feature for both the Main and Guest networks. The Guest network is basically a VLAN function.

I make Rest for iPad, and now every time i open it , i chose the country and the network and tells me he works the activation and then tell me the iPad could not be activated, try again what can i do

i make Rest for iPad, and now every time i open it , i chose the country and the network and tells me he works the activation and then tell me the iPad could not be activated, try again what can i do

Those are the instructions for your computer's iTunes (i.e. using the Store menu at the top of your computer's iTunes and selecting 'View My Account' on it). If you are doing it on your iPad then are you following the instructions for iOS devices :
To unhide your purchases
Depending on the content type, open the App Store, iBooks, or iTunes Store on your device.
Scroll to the bottom of the main page.
If you're not already signed in, tap Sign In.
Tap your Apple ID name, then tap View Account.
Scroll down on the Account pane, and tap Hidden Purchases.
Locate the item you would like to unhide then tap the Unhide button.

In system settings 15 item are not accessible, get the message: cannot open it, is not possible on intel based MAC. Items like security, i cloud user and groups network and more

in system settings 15 item are not accessible, get the message: cannot open it, is not possible on intel based MAC. Items like security, iCloud user and groups network and more.
Genius bar told me to erase the harddisk and install OSX Maverick again. This has not changed the problems with the system settings

You need to Repartition the drive as One partition which will erase all data from it and then reinstall OS X. then with the initial setup system you chose the language on the first screen that comes up. That sets the language for the whole system.
There is no other way of completely removing certain information created by a previous owner. this hold strue whether you are selling or give a Mac to someone.
To do the repartitioning you need to use the Online Internet Recovery system, if the Mac came with Lion 10.7 or above, or from the original system reinstall discs that came with it when it was new.

Airport Extreme 802.11AC + 5th Gen and guest network access

I have the current gen Airport Extreme 802.11AC with a 5th Gen extending the network. With this setup, I am unable to login using our guest network setup. I have tried using guest network with a password and one without but its the same results. When a guest logins, it stuck attempting to login with no error messages.
So is it possible to have this configuration and still have guest network access?

Please review what I said originally.......that the guest network function on the AirPort Extreme is designed to work with a simple modem......so the AirPort acts as the main router for the network..
Another way of saying the same thing is that the AirPort needs to be "in charge" of your network for the guest feature to work correctly. The AirPort cannot be in charge if it is connected to another device that is already configured to be the main router on your network.....your Actiontec modem/router.
The Actiontec device combines the functions of a separate modem and a separate router in one package. This type of device is known as a modem/router, or also known as a gateway.
Some folks call a modem/router or a gateway......a modem. So, things can get confusing.
I do not know if it is possible for the Actiontec device that you have to be configured to act as a simple modem.....so the routing functions of the device are completely turned off. (Turning off the wireless on the Actiotec does not turn off the routing function).
If you turn off the wireless on the Actionec, it becomes a modem and a wired router. And that wired router is still in charge of your network.
The guest network feature will not work correctly unless the AirPort is in charge of your network.
My suggestion was for you to ask your Internet Service Provider (ISP), if they could supply you with a simple modem. That is all that you need. You don't need two routers....and the Actiontec that you have now is not allowing the guest feature to work correctly.

Help setting up a private and guest network

If someone could help me out here it would be appreciated. Here's the deal. I have AT&T U-verse and a 2Wire modem (3801HGV). What I'm looking to do is set up a private wireless network (to access all our computers/NAS/etc) and a guest network (which only has access to the public internet...for guests/co-workers). Unfortunately, the AT&T router doesn't have a guest network feature. So, doing a little research, I decided to buy an Airport Extreme because of its guest network feature. Upon setting that up, the Airport Extreme asks me to go into bridge mode which automatically shuts off the guest network. I thought maybe I could use an Airport Express to setup an additional wireless network that DIDN'T have access to the private network but unfortunately, it sees all the private stuff (it also wants to be in bridge mode).
Can anyone think of a solution for this?

Yeah, I tried this but unfortunately it didn't work
Was there a particular error message that you received?
Or was it a case of the 2-Wire not wanting to see a Double NAT situation on the network?
I can make this work with an AirPort Express using another Apple router as the "main" router, but I don't have a 2-Wire to test things out. By "work", I mean that computers on the AirPort Express network cannot "see" any of the devices on the "main" network.
If you are interested, I'll provide some details on the setup of the AirPort Express for you.

Shared Printers and Guest Networks

I have an Airport Extreme with an HP 990cxi printer connected to the USB port. I have the printer shared. My AE is configured to Create a Wireless Network". It is also configured to create a Guest Network.
As it stands, someone connected to the Guest Network cannot print. Is it possible to give someone access to the printer w/o giving them access to the private network? If not, what would I have to do to limit their access to my private network and what would they have access to?

I would delete and re-add the printer.
If that doesn't work, try resetting the printing system and re-add the printer. In the Print & Fax system prefs, ctrl-click on the printer list and select Reset Printing System.

How to extend secure network and guest network.

Sorry if this has been covered but I couldn't find it.
I have an Airport Extreme running the 7.6.3 firmware. Once Comcast gets their act together it will be running off a static IP. I want to wirelessly extend my guest WiFi and my secure WiFi. What do I need to get this done? Do I need to get an Express for each network? Or can another Extreme repeat both networks? Eventually I hope we will have Cat5 running to the repeater's location but that could be a long way off.
Thanks!

I cannot get the web page to open when I do a search on the SMC8014, but it appears that this is a modem/router or gateway type of device.....which will not allow the Guest Network feature to be enabled on the AirPort Extreme.
I did find this, which confirms that the SMC is a modem/router or gateway....not what you want.
http://www.speedguide.net/routers/smc-smc8014-biz-business-cable-gateway--534
The solution is to find out from SMC or your Internet Service Provider whether or not the 8014 can be configured to operate in "Bridge Mode".....which would then allow you to configure the AirPort Extreme to operate as the main router on the network. This would allow the Guest Network option on the AirPort Extreme to be enabled correctly.
Or better yet.....ask your ISP for a simple modem.......not a modem/router or gateway type of device.
So assuming this is all compatable (or I get compatable equipment), I can extend both networks with 1 express or 1 extreme?
That is correct.

Using an airport extreme in both bridged mode and guest network with DHCP

I currently use a third-generation airport extreme in bridge mode to connect my various Mac servers To the Internet. I'm using bridge mode on the AirPort Extreme because I have up to five static IP address (only using three now) I am currently not using the wireless network, and none of the servers are serving DHCP. I am looking at the Newer airport extreme with guest network Wi-Fi. My question is, does the new airport extreme base station support bridge- mode for any devices and host DHCP for the guest network connecting wirelessly to the base station?

The AirPort Extreme cannot be in Bridge Mode and support a Guest Network.
The AirPort must be configured to provide DHCP and NAT services if you want to enable the Guest Network function.
If you really do have a 3rd Gen AirPort Extreme, it will support the Guest Network feature if you connect the AirPort directly to a simple modem.....not a modem/router or gateway type of devices.......and configure the AirPort to provide DHCP and NAT services for the network.

Guest Network and iTunes DJ

Is it possible for users connected to the guest network to use iTunes DJ for an iTunes library which is on a Mac connected to the main network?

The MAC address filtering is for the main wireless network and not for the guest network.
The guest network is different from your private wireless network. This is very convenient especially if you always have guests in your home who would like to access the Internet.
When guests connect to the Guest network, they can connect to the Internet but will not have access to computers and devices which are connected to your Valet or Linksys Wireless-N Router. The Guest network is a virtual network within your private network.
The Guest network operates on a different IP address range (192.168.33.x). This allows your guests to connect to the Internet without becoming a part of your private network.
The guest will need the password to the network if they want to access the Internet.

Can Airport Express extend the private and guest networks simultaneously?

Can the Airport Express be used to extend the private and guest WiFi networks coming from the base station simultaneously, or can it only be an extension for one of the two at a given time?
Joe

Can the Airport Express be used to extend the private and guest WiFi networks coming from the base station simultaneously
Yes, either by a wireless connection or Ethernet connection to the base station.....assuming that both the base station and extender are using firmware 7.6.3 or higher and AirPort Utility 6.3 is used to configure both AirPorts, which must be dual band models.

E4200: guest networking and MAC filter

Hi there,
I have my e4200 setup with guest networking enabled and also MAC filtering. Somehow i was epxecting MAC filtering not to be applied to guest wireless network but it appears to be so.
Can anybody please confirm if this is the case and if there's a workaround?
Solved!
Go to Solution.

You are correct. MAC filtering is universal in the router. There is no workaround besides not using it.

Wireless and guest network and HREAP

Similar Messages

Maybe you are looking for