Skip navigation

Guest Network in Bridged Mode?

6131 Views 13 Replies Latest reply: Jan 21, 2014 6:59 PM by banyanfinn RSS Branched to a new discussion.
l008com Level 1 Level 1 (35 points)
Currently Being Moderated
Jun 4, 2013 2:09 AM

I'm wondering if you can use the Guest wifi network feature on an Airport Extreme that is in bridged mode. When I say bridged mode, I do NOT mean "extending" a wireless network (like many threads with a smiliar title seem to mean). What I mean is that I have a single Airport Extreme. I want to use it as a wireless access point, while continue to use my ISP's modem/router combo as the DHCP provider. The ISP box will have no wifi enabled. The Airport will connect to that box (via a large switch) and be convfigured as a bridge, instead of "distributing IP addresses" itself.

 

I know that in this setup, a regular wireless network is not a problem. But I've never tried a regular and a guest network together, while in bridged mode. I'm hoping this is do-able, because I don't think the DHCP in the ISP box can be turned off. Plus we only planned for a single ethernet cable going up a floor to where this airport is going to live. If it is going to be the DHCP provider too, then there would have to be a second ethernet cable, so the airport can logically be between the ISP box and the switch.

  • Bob Timmons Level 9 Level 9 (75,470 points)
    Currently Being Moderated
    Jun 4, 2013 5:07 AM (in response to l008com)

    I'm wondering if you can use the Guest wifi network feature on an Airport Extreme that is in bridged mode.

    Sorry, but no. The AIrPort Extreme will have to be in router mode providing DHCP and NAT services if you want it to create both a "main" and "guest" network.

  • Bob Timmons Level 9 Level 9 (75,470 points)
    Currently Being Moderated
    Jun 16, 2013 9:18 AM (in response to l008com)

    Tried this with 3 different 3rd party routers, but no go.

     

    If you have another Apple router on the wired network that is set up with the Guest Network, then you can add a second AirPort and the guest network will work in Bridge Mode.

     

    Might that be the case?

     

    If not, have you tested to verify that you can get an Internet connection on the Guest Network?

  • Bob Timmons Level 9 Level 9 (75,470 points)
    Currently Being Moderated
    Jun 24, 2013 1:44 PM (in response to l008com)

    As I mentioned previously, the AirPort must be in a Router Mode of DHCP and NAT to enable the Guest Network feature....and have both the "main" "guest" networks operate correctly with Internet access.

     

    You might check with your ISP about the possibility of obtaining a simple modem.

  • Bob Timmons Level 9 Level 9 (75,470 points)
    Currently Being Moderated
    Jun 24, 2013 3:00 PM (in response to l008com)

    Please post back when you get the new modem that should get you in business.

     

    Most ISPs will activate a new modem over the phone if you have the MAC Address of the modem, which should be clearly marked on the back or bottom of the device.

     

    Good luck!

  • dennypage Calculating status...
    Currently Being Moderated
    Sep 23, 2013 12:50 PM (in response to l008com)

    Yes, you can have both private and guest in bridged mode.

     

    The reason that a DHCP address is not received on the guest network is because packets originating on the guest network are 802.1Q tagged as vlan 1003. In order for your firewall/dhcp server to process these packets, you will need to add a virtual interface for that vlan.

  • nrh Calculating status...
    Currently Being Moderated
    Sep 28, 2013 12:01 PM (in response to dennypage)

    thanks for the pointer dennypage.

    Are you referring to Airport Express Base or do other Wi-Fi routers use VLANs like this?

  • dennypage Level 1 Level 1 (0 points)
    Currently Being Moderated
    Sep 28, 2013 8:24 PM (in response to nrh)

    I was referring to the Aiport Extreme. I don't know if the Express works the same way or not.

     

    Wi-Fi access points that have the capability to host multiple SSIDs often have VLAN as a configuration option. But most retail access points designed for home use do not.

  • name99 Calculating status...
    Currently Being Moderated
    Nov 7, 2013 2:16 PM (in response to dennypage)

    This is a valuable answer because it clarifies the one piece of the puzzle as to how this might (or might not) work.

     

    It is obvious that a device connecting to the base station informs the base station as to whether it is on the guest or private network through the SSID it connects to. It's obvious how one can create two overlaid networks through using two different (non-routable) IP address ranges. It's obvious how the base station --- AS DHCP and NAT HOST --- can allocate addresses in these two ranges.

     

    What was not obvious is how this can all propagate out to a third party DHCP server --- how would that server know to allocate IP addresses in one range rather than the other?

    But use of a VLAN tag answers that question. Very cute use of a (to home users) rather obscure part of the ethernet spec.

  • LewisO Calculating status...
    Currently Being Moderated
    Nov 11, 2013 11:27 AM (in response to dennypage)

    Dennypage, you mentioned "you will need to add a virtual interface for that vlan.", where does one set this up? In Airport? or in the device supplying the DHCP, ie. the firewall device?

    Thanks - Lewis

  • banyanfinn Level 1 Level 1 (0 points)
    Currently Being Moderated
    Jan 21, 2014 6:59 PM (in response to l008com)

    Oops I posted ths on the wrong thread... can't figure out how to delete my post.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (1)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.