Richard Mac User

Q: Please help with optimum setup

Hello

 

I know very little about networking.

 

Currently my setup is -

 

D-Link ADSL Modem Router with WiFi turned off >

 

Airport extreme connected by ethernet to Modem/Router - Create a wireless network - Bridge Mode - Static IP address> (IPv6 set for Link-Local only -- Thanks to Bob Timmons which solved and earlier problem)

 

Airport extreme connected by ethernet to Airport extreme - Create a wireless network - Bridge Mode> - Static IP address> (IPv6 set for Link-Local only)

 

Airport extreme connected by ethernet to Airport extreme - Create a wireless network - Bridge Mode> - Static IP address (IPv6 set for Link-Local only)

Now the firmware on the Apple units is very recent (May 2016) yet the firmware on the D-Link is over 3 years. Would it be a more efficient and secure setup if I disabled DCHP on the D-link and set up DHCP and NAT on the first Airport Extreme? If so can you check I am correct.-

 

D-Link Router settings - leave IP address and Subnet mask as is.

- Uncheck Enable DHCP Server

 

On first Airport extreme - Change from Off (Bridge Mode) to DHCP and NAT

 

Also what range of numbers should I use ideally for static addresses?

 

I would welcome feedback and any good practice I could follow.

 

Thanks

iMac, OS X El Capitan (10.11)

Posted on Aug 29, 2016 6:30 PM

Close

Q: Please help with optimum setup

  • All replies
  • Helpful answers

Previous Page 2
  • by Richard Mac User,

    Richard Mac User Richard Mac User Aug 30, 2016 7:29 AM in response to Bob Timmons
    Level 1 (27 points)
    Desktops
    Aug 30, 2016 7:29 AM in response to Bob Timmons

    Thanks Bob,

     

    I am probably going too far (got a bee in my bonnet about this don't know why). I will give it a try. If I am not happy I will revert to what I have now and it will only have cost me a few hours of time ( and probably a lot of frustration).

     

    What problems did you encounter with PPPoe on the AirPort?

  • by Bob Timmons,

    Bob Timmons Bob Timmons Aug 30, 2016 7:34 AM in response to Richard Mac User
    Level 10 (104,993 points)
    Wireless
    Aug 30, 2016 7:34 AM in response to Richard Mac User

    Unpredictable, intermittent Internet connection drops.  Connection might hold 3-4 hours, or 3-4 days.

     

    Apple has not updated their PPPoE settings in over 8 years.

  • by LaPastenague,

    LaPastenague LaPastenague Aug 30, 2016 2:02 PM in response to Bob Timmons
    Level 9 (52,295 points)
    Wireless
    Aug 30, 2016 2:02 PM in response to Bob Timmons

    Honestly, I do not think that you will be happy with PPPoE on the AirPort, but hope that I am wrong.

    I think it is worth a try.

     

    I did get improvement from a totally useless PPPOE to one that worked when the ISP swapped me to a different brand DSLAM in the exchange. People also hammered me here on another forum that they had PPPOE working just fine with Extreme. So I modified my view somewhat.. PPPOE can work.. but it is case by case basis.

     

    The big advantage of using PPPOE on the Extreme is the modem is then a transparent device.. and the firmware on it is irrelevant to security. Some modems issues that are known to exist are not fixed by the manufacturer because they are out of production.. actually production on modem models is often just 12months before the next one comes out.. and the manufacturers are lazy to go back and release updates.

     

    The security of the airport firmware is something you can be very certain of. For high security situation it is something worth taking advantage of.

     

    If PPPOE on the Extreme/TC fails, I would still use a bridged modem and buy a router that takes 3rd party firmware.. my favourite is now gargoyle which will load on a cheap router. This offers controls and firewall and continual view of links.

  • by Bob Timmons,

    Bob Timmons Bob Timmons Aug 30, 2016 2:26 PM in response to LaPastenague
    Level 10 (104,993 points)
    Wireless
    Aug 30, 2016 2:26 PM in response to LaPastenague

    Will be interesting to see how things turn out on this one. I think that we are in for some "try this" and "try that" as far as the PPPoE settings are concerned on the AirPort.  Hope that I am wrong on this.

  • by Richard Mac User,

    Richard Mac User Richard Mac User Aug 31, 2016 7:04 AM in response to Bob Timmons
    Level 1 (27 points)
    Desktops
    Aug 31, 2016 7:04 AM in response to Bob Timmons

    Hi Guys,

     

    I am a bit stuck already. Changing the modem to bridge mode throws up options that I can´t find the answers to-

     

    Service Category -

    UBR without PCR

    UBR with PCR

    CBR

    Non Realtime VBR

    Realtime VBR

     

    Encapsulation Mode -

    LLC/SNAP-BRIDGING

    VC/MUX

     

    I am searching for what settings my ISP recommends but haven´t found it yet.

  • by Richard Mac User,

    Richard Mac User Richard Mac User Aug 31, 2016 7:18 AM in response to Richard Mac User
    Level 1 (27 points)
    Desktops
    Aug 31, 2016 7:18 AM in response to Richard Mac User

    I have found that info. The only question I now have is on the modem in the Bridge Connection Type after inputting

    Service Category -

    UBR without PCR

     

    Encapsulation Mode -

    LLC/SNAP-BRIDGING

     

    There is a tick box - Enable Bridge Service, should that be ticked or unticked. It is unticked by default (and the above default settings were correct, so should I assume unticked is correct?)

     

    Thanks

  • by Bob Timmons,

    Bob Timmons Bob Timmons Aug 31, 2016 7:36 AM in response to Richard Mac User
    Level 10 (104,993 points)
    Wireless
    Aug 31, 2016 7:36 AM in response to Richard Mac User

    I assume that you followed my advice to first call your ISP support folks to find out whether they will even support the type of setup that you are considering.

     

    Assuming that their previous answer was "yes", then you will need to call the ISP support folks again to ask them what the correct settings would be for your modem.  If they do support this type of setup, they will likely have an online support document with detailed step-by-step instructions for the setup.

     

    If they cannot tell you this, then you will have to conclude that that they will not really support you on this project......since I doubt that any of us on an online support forum would be able to help with questions regarding what your ISP may nor may not support.

     

    If you could tell us who your ISP might be, maybe another user who has done this with their service would see this thread and be able to help.

  • by Bob Timmons,

    Bob Timmons Bob Timmons Aug 31, 2016 8:02 AM in response to Bob Timmons
    Level 10 (104,993 points)
    Wireless
    Aug 31, 2016 8:02 AM in response to Bob Timmons

    The only question I now have is on the modem in the Bridge Connection Type after inputting

    Service Category -

    UBR without PCR

     

    Encapsulation Mode -

    LLC/SNAP-BRIDGING

     

    There is a tick box - Enable Bridge Service, should that be ticked or unticked. It is unticked by default (and the above default settings were correct, so should I assume unticked is correct?)

    What do the support folks at your ISP say about this?

     

    My guess....and it is just that, a guess......would be that if you want to Enable Bridge Service.....(you do, if you want the modem to operate in Bridge Mode)......that the tick box should be checked to Enable Bridge Service.

  • by Richard Mac User,

    Richard Mac User Richard Mac User Aug 31, 2016 11:52 AM in response to Bob Timmons
    Level 1 (27 points)
    Desktops
    Aug 31, 2016 11:52 AM in response to Bob Timmons

    The enable Bridge Service was a second tick box after ticking on the first enable Bridge mode option. Seemed strange. Anyway I set it up as instructed (from a manual found on line for one of the ISP own routers which showed bridge mode) but either way ticked or unticked I couldn´t get on line. Maybe I will try another day with the supplied modem/router even though the manual was for a different model I may have some luck.

     

    One of the problems I had in the past was getting my Apple wifi devices to connect to wifi, often I had to use static ip addresses. I noticed whilst going through the modem/routers setup page that I could turn off Enable DHCP Server. I did this and set the first AE to Router mode - DHCP only rather than Off (Bridged mode). This should be ok, should´t it. It seems to work ok.

  • by Bob Timmons,

    Bob Timmons Bob Timmons Aug 31, 2016 12:31 PM in response to Richard Mac User
    Level 10 (104,993 points)
    Wireless
    Aug 31, 2016 12:31 PM in response to Richard Mac User

    If your goal was to use the security of the Apple router, then using DHCP Only on the AirPort provides no benefit to you at all in that regard.....since the NAT "firewall" is turned off and disabled in the DHCP Only setting.  In other words, "security" has not changed on your network.

     

    If you feel that DHCP Only works better than your previous setup, that might be a reason to use it, but I thought that your primary reason.....and the one the LaPastenague suggested as well.....was to use the AirPort as a DHCP and NAT router to take advantage of the better security offered by the AirPort.

     

    Here is what I would suggest if you want to use the AirPort as a router on your network:

     

    Ask your ISP if they can provide a simple, bridge mode modem.....it will have only one Ethernet port on the device, so this will not be a modem/router or gateway type of device like you have now.  A simple bridge mode modem will come preconfigured to work correctly with the service from your ISP.  Then, you can set up the AirPort as the router for your network.

     

    All too often, trying to change a modem/router to operate only as a modem is a study in frustration. After all, the device was designed to be a modem/router......not a modem.

     

    If your ISP cannot offer you a simple, bridge mode modem option, then......I'm afraid that I'm out of ideas, other than looking for another ISP that can better suit your needs.  In that regard, I would always recommend a cable provider over an ADSL provider.

  • by Richard Mac User,

    Richard Mac User Richard Mac User Aug 31, 2016 12:43 PM in response to Bob Timmons
    Level 1 (27 points)
    Desktops
    Aug 31, 2016 12:43 PM in response to Bob Timmons

    Hi Bob,

     

    Yes I appreciate that security has not changed, I am just hoping that this small change in configuration will improve my experience of connecting wifi devices.

     

    I live on a very small island so the chance of getting a non-standard bridge mode modem (non-standard as in I have never seen anyone supplied with anything other than modem/routers), is very small. I will have to try the main land.

     

    Regards

  • by LaPastenague,

    LaPastenague LaPastenague Aug 31, 2016 1:41 PM in response to Richard Mac User
    Level 9 (52,295 points)
    Wireless
    Aug 31, 2016 1:41 PM in response to Richard Mac User

    My recommendation is to buy your own simple modem.. I like the TP-Link models, 8950N or 8960N .. these are extremely easy to bridge.

     

    Your ISP will not care at all what modem you use. The authentication is based on username and password with PPPOE.

     

    But I have to admit the problem could be the TC is just useless for PPPOE.

     

    Every computer has PPPOE client available.. and it is the best way to test for things. Plug it into the modem and once you setup the modem in bridge mode then use the PPPOE client in the computer. If this works then you can be sure the configuration is possible and failure on the TC is caused by its poor PPPOE client.. as Bob has indicated .. this is a problem we have seen many times. PPPOE is not as simple as Apple seem to think it is and without any controls or even logs to help find out what is going on it is impossible to repair.

     

    The other alternative is to buy a rather better modem router.. but it is hard to recommend models as each market has its own favourites. Here we use the TP-Link mostly.. but Billion used to have good models.

     

    I think you will need to buy your own equipment.. whether simple bridged modem or a decent modem router.. or a combo of bridged modem and router.. you can then add the TC to it as bridged device.

  • by Richard Mac User,

    Richard Mac User Richard Mac User Sep 1, 2016 2:58 AM in response to LaPastenague
    Level 1 (27 points)
    Desktops
    Sep 1, 2016 2:58 AM in response to LaPastenague

    Thanks LaPastenague,

     

    I think I can get the 8950 or 8960 here, I know I can get the 8970 or 9980 model (are they as easy to bridge?).

     

    Following on from the recommendation of Bob, I did a search and found I could get the TD-8616 from the mainland.

  • by LaPastenague,

    LaPastenague LaPastenague Sep 1, 2016 11:18 PM in response to Richard Mac User
    Level 9 (52,295 points)
    Wireless
    Sep 1, 2016 11:18 PM in response to Richard Mac User

    The 8616 is a pure modem.. it is unsuitable for long lines.. That means if your Island has a local exchange it will be ok but if it is located far away on the mainland you will have issues.

     

    If pppoe doesn't work this modem will be unsuitable.. there is pppoe info for running it on a Mac.

    http://www.tp-link.com/en/faq-285.html

     

    The ones I recommended are cheap and still use broadcom chipset which is superior to the other models which use much cheaper trendchip.

     

    The 8970 changed in the v3 ?? to broadcom.. but I suspect you have no access to CLI and will pay a lot more for no advantage.

Previous Page 2