One last thing. If you want the AE to create a guest network, it must be the DHCP server on the network, which will conflict with the netgear unless if you do this :
On the NetGear's configuration page, then WAN Setup and set the DMZ to 192.168.0.2 On the Airport Express, connect to the NetGear via the Internet port (not LAN port) and set it to "Share a Single IP Address" instead of Bridge Mode On the NetGear, go to LAN setup and reserve the IP address 192.168.0.2 for the AE base station (you'll need the WAN port's MAC address for this). For instance if the AE's WAN MAC address is 00:12:34:56:78 then use that to reserve 192.168.0.2. This will make sure the AE always gets the same IP address, and make sure it's the DMZ on the network (DMZ means all traffic through the firewall is sent directly to this device). This will mean you're not using double NAT as all the data goes through the NetGear's firewall to the AE, where it's then distributed to the correct device. Again, the AE must be doing the job of DHCP server in order to create a guest wifi network. You can't just switch off the DHCP server on the NetGear and turn it on on the AE as the AE's DHCP settings are a bit restrictive so you can't specify a different router other than itself. Only thing to make sure is that the AE doesn't create a network on the 192.186.0.x subnet as that'll be the same as the NetGear server and the network will get confused. Hope that's not too confusing. I'm more than happy to log in remotely if you want to turn on remote management on the router and send me the necessary details. Regards Sam MacAmbulance Providing affordable Apple & PC services Sam Mullen 07747 778022 http://www.macambulance.co.uk [email protected] On 29 Jul 2012, at 19:36, Phil Tomlinson <[email protected]> wrote: > > Thanks Sam very succinct (Woah Stephen - heavy :) > > Phil > > On 29 Jul 2012, at 19:26, Stephen Watson wrote: > >> Thanks for that Sam, but it leaves me a bit confused ... As usual! >> >> Our Netgear ADSL modem/router DG384G is connected to the phone line. An >> Ethernet cable runs from an Ethernet port in the Netgear to the WAN (circle) >> port in the AE base station. In Airport Utility, it is set to Bridge Mode. >> >> Is this good? Does it mean anyone who could get on our network can see our >> USB disks attached to our AE base station? >> >> In the AE setup it says most of the time to connect the router to the AE via >> the WAN port of the AE. It does also say on page 23: >> >> "... Connect your DSL or cable modem to the AE Ethernet WAN port. If you are >> using an existing Ethernet network with Internet access to connect to the >> Internet, you can connect the AE to the Ethernet network instead." >> >> I assume that the former applies to us, but should we be using NAT and DHCP >> for security or is Bridge Mode OK? >> >> Having just had a single phone <> modem/router <> Mac setup for so long I >> get a bit confused over the extra connection setup of the Airport Extreme. >> >> Also, how do we provide a guest network with only Internet access but no >> access to our USB disks. This is a feature mentioned on Apple's AE web page >> but I can't find the instructions anywhere in the booklet. >> >> Sorry about all the length! >> >> Regards, >> >> Stephen >> >> Find my iPhone apps at www.blacktablet.co.uk >> >> On 29 Jul 2012, at 18:57, Sam - MacAmbulance <[email protected]> wrote: >> >>> Hi Phil >>> >>> LAN (local area network) : Anything on your network at home >>> WAN (wide area network) : Anything beyond your router >>> NAT (network address translation) : The translation between your private >>> network and the rest of the world (public network). This job's done by your >>> router. The router's firewall is what allows data through from the internet >>> to your computer >>> DHCP : Automatically giving >>> configuring something with an IP address, everything on your home network >>> must have a unique IP address or the router won't know where to send the >>> data >>> >>> If your router & your Airport are both set to create private networks >>> (using NAT & DHCP) then anything connected to your Airport router will be >>> invisible to the rest of the network as they are in their own private >>> network. If you set the Airport to bridge mode, it just bridges the >>> wireless & the wired networks without any private network creation, >>> everything exists on the same network. >>> >>> Hope that helps! >>> >>> Sam >>> MacAmbulance >>> Providing affordable Apple & PC services >>> >>> Sam Mullen >>> 07747 778022 >>> http://www.macambulance.co.uk >>> [email protected] >>> >>> >>> On 29 Jul 2012, at 17:35, Phil Tomlinson <[email protected]> >>> wrote: >>> >>>> Thanks Sam - have done this. All seems ok. Anyone know of a text that >>>> explains these evidently basic concepts (LAN Wan bridge mode etc.) to IT >>>> network-challenged blokes of a certain age? >>>> >>>> Phil >>>> >>>> Sent from my iPad >>>> >>>> On 29 Jul 2012, at 16:25, Sam - MacAmbulance <[email protected]> >>>> wrote: >>>> >>>>> Hi Phil >>>>> >>>>> Sounds like you've got your Airport base station connected to your router >>>>> via the WAN (circle of dots) port rather than one of the LAN ports( <--> >>>>> icon). >>>>> >>>>> In airport utility, set the airport to "Off (Bridge Mode)" in the >>>>> Internet tab, then put the ethernet cable into one of the network ports >>>>> not the internet port. >>>>> >>>>> Regards >>>>> >>>>> Sam >>>>> MacAmbulance >>>>> Providing affordable Apple & PC services >>>>> >>>>> Sam Mullen >>>>> 07747 778022 >>>>> http://www.macambulance.co.uk >>>>> [email protected] >>>>> >>>>> >>>>> On 29 Jul 2012, at 16:19, Phil Tomlinson >>>>> <[email protected]> wrote: >>>>> >>>>>> >>>>>> Message on the Airport Utility App on my iPad says I've got double NAT >>>>>> and should change my Airport to "bridge mode" What does it mean? What >>>>>> should I do? >>>>>> >>>>>> Phil T >>>>>> >>>>>> >>>>>> Sent from my iPad >>>>>> >>>>>> -- >>>>>> You received this message because you are subscribed to the Google >>>>>> Groups "Sussex Mac User Group" group. >>>>>> To post to this group, send an email to [email protected]. >>>>>> To unsubscribe from this group, send email to >>>>>> [email protected]. >>>>>> For more options, visit this group at >>>>>> http://groups.google.com/group/smug?hl=en-GB. >>>>>> >>>>> >>>>> >>>>> -- >>>>> You received this message because you are subscribed to the Google Groups >>>>> "Sussex Mac User Group" group. >>>>> To post to this group, send an email to [email protected]. >>>>> To unsubscribe from this group, send email to >>>>> [email protected]. >>>>> For more options, visit this group at >>>>> http://groups.google.com/group/smug?hl=en-GB. >>>> >>>> >>>> -- >>>> You received this message because you are subscribed to the Google Groups >>>> "Sussex Mac User Group" group. >>>> To post to this group, send an email to [email protected]. >>>> To unsubscribe from this group, send email to >>>> [email protected]. >>>> For more options, visit this group at >>>> http://groups.google.com/group/smug?hl=en-GB. >>> >>> >>> -- >>> You received this message because you are subscribed to the Google Groups >>> "Sussex Mac User Group" group. >>> To post to this group, send an email to [email protected]. >>> To unsubscribe from this group, send email to >>> [email protected]. >>> For more options, visit this group at >>> http://groups.google.com/group/smug?hl=en-GB. >> >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Sussex Mac User Group" group. >> To post to this group, send an email to [email protected]. >> To unsubscribe from this group, send email to >> [email protected]. >> For more options, visit this group at >> http://groups.google.com/group/smug?hl=en-GB. > > > -- > You received this message because you are subscribed to the Google Groups > "Sussex Mac User Group" group. > To post to this group, send an email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/smug?hl=en-GB. -- You received this message because you are subscribed to the Google Groups "Sussex Mac User Group" group. To post to this group, send an email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/smug?hl=en-GB.
