Guest Network in Bridged Mode?

I'm wondering if you can use the Guest wifi network feature on an Airport Extreme that is in bridged mode.

Sorry, but no. The AIrPort Extreme will have to be in router mode providing DHCP and NAT services if you want it to create both a "main" and "guest" network.

Tried this with 3 different 3rd party routers, but no go.

If you have another Apple router on the wired network that is set up with the Guest Network, then you can add a second AirPort and the guest network will work in Bridge Mode.

Might that be the case?

If not, have you tested to verify that you can get an Internet connection on the Guest Network?

As I mentioned previously, the AirPort must be in a Router Mode of DHCP and NAT to enable the Guest Network feature....and have both the "main" "guest" networks operate correctly with Internet access.

You might check with your ISP about the possibility of obtaining a simple modem.

Please post back when you get the new modem that should get you in business.

Most ISPs will activate a new modem over the phone if you have the MAC Address of the modem, which should be clearly marked on the back or bottom of the device.

Good luck!

Yes, you can have both private and guest in bridged mode.

The reason that a DHCP address is not received on the guest network is because packets originating on the guest network are 802.1Q tagged as vlan 1003. In order for your firewall/dhcp server to process these packets, you will need to add a virtual interface for that vlan.

thanks for the pointer dennypage.

Are you referring to Airport Express Base or do other Wi-Fi routers use VLANs like this?

I was referring to the Aiport Extreme. I don't know if the Express works the same way or not.

Wi-Fi access points that have the capability to host multiple SSIDs often have VLAN as a configuration option. But most retail access points designed for home use do not.

This is a valuable answer because it clarifies the one piece of the puzzle as to how this might (or might not) work.

It is obvious that a device connecting to the base station informs the base station as to whether it is on the guest or private network through the SSID it connects to. It's obvious how one can create two overlaid networks through using two different (non-routable) IP address ranges. It's obvious how the base station --- AS DHCP and NAT HOST --- can allocate addresses in these two ranges.

What was not obvious is how this can all propagate out to a third party DHCP server --- how would that server know to allocate IP addresses in one range rather than the other?

But use of a VLAN tag answers that question. Very cute use of a (to home users) rather obscure part of the ethernet spec.

Dennypage, you mentioned "you will need to add a virtual interface for that vlan.", where does one set this up? In Airport? or in the device supplying the DHCP, ie. the firewall device?

Thanks - Lewis

Oops I posted ths on the wrong thread... can't figure out how to delete my post.