Apple AirPort Networks manual

Ap ple AirP or t Netw orks[...]

2 1 C on ten ts Chapter 1 3 Getting Star ted 5 Configuring an Apple Wireless Device f or Internet Acc ess Using AirP or t Utility 6 Extending the Range of Y our AirPort Network 6 Sharing a USB Hard Disk Connected to an AirP or t Extreme Base Station or Time Capsule 6 Printing with an A pple Wireless Device 6 Sharing Y our Computer’ s Internet C o[...]

1 3 1 Getting Star ted AirP or t offers the easiest wa y to pro vide wireless In ternet access and netw ork ing anywhere in the home, classroom, or office . AirP or t is based on the latest Institute of Electrical and Elec tronics Engineers (IEEE) 802. 1 1n draft specification and pro vides fast and reliable wirele ss networking in the home, classr[...]

4 Chapter 1 Getting Started Note: When the features discussed in this documen t apply to the AirP or t Extreme Base Station, AirPort Express, and Time Capsule , the devices are ref erred to collectively as Apple wireless device s. With an AirP or t Ex treme Base Station or a Time Capsule, you can connect a USB hard disk so that everyone on the netw[...]

Chapter 1 Getting Started 5 Y ou can set up an Apple wireless device and connect to the Internet wir elessly in minutes. But because Apple wireless devices ar e flexible and powerful networking products, you can also create an AirP or t network that does much more. I f you want to design an AirP or t network that provides Int ernet access to non-Ai[...]

6 Chapter 1 Getting Started Set up your Apple wireless devic e manually using AirP or t Utilit y when:  Y ou want to provide Internet acc ess to computers that c onnect to the wireless device using Ethernet  you ’ve already set up y our device, but you need to change one setting, such as your account inf ormation  Y ou need to configure adv[...]

Chapter 1 Getting Started 7 Y ou can share your Internet connection as long as your comput er is connected to the Internet. If your computer goes t o sleep or is restarted, or if you lose your In ternet connection, you need to restart Internet sharing. T o star t Internet sharing on a computer using Mac OS X v1 0.5 or later: 1 Open System P referen[...]

8 Chapter 1 Getting Started T o star t Internet sharing on a computer using Windows: 1 Open Contr ol P anel from the Star t menu, and then click “Network and Internet.” 2 Click “Network and Sharing Center .” 3 Click “Manage network connections” in the T asks list. 4 Right-click the network connection you want to share , and then select [...]

2 9 2 AirP or t Securit y This chapter pr ovides an o ver view of the securit y featur es av ailable in AirP or t. Apple has designed its wirele ss devices to pro vide several levels of security , so you can enjoy peace of mind when y ou access the Int ernet, manage online financial transactions, or send and receive email. The AirP or t Extreme Bas[...]

10 Chapter 2 AirPort Security P assword Prot ection and Encr yption AirP or t uses password protection and encryption to deliver a level of security comparable to that of traditional wired netw orks. Users can be required to ent er a password to log in t o the AirP or t network. When transmitting data and passwords, the wireless device uses up t o [...]

Chapter 2 AirPort Security 11 RADIUS Suppor t The Remote Authen tication Dial-In User S er vice (RADIUS) makes securing a large network easy . RADIUS is an access control prot ocol that allows a system administrator to create a cen tral list of the user names and passwords of c omputers that can access the network. Placing this list on a centralize[...]

12 Chapter 2 AirPort Security The EAP protocol known as TLS ( Trans port Layer Security) presents a user ’ s information in the form of digital certificates. A user ’ s digital cer tificates can comprise user names and passwords , smar t cards, secure IDs, or any other identity credentials that the IT administrator is comfortable using. WP A us[...]

Chapter 2 AirPort Security 13 WP A and WP A2 Enterprise WP A is a subset of the draf t IEEE 802. 1 1i standard and effectively addresses the wireless local area network ( WLAN) securit y requirements f or the enterprise. WP A2 is a full implementation of the ratified IEEE 802. 1 1i standard. In an enterprise with IT resources , WP A should be used [...]

3 14 3 AirP or t Network Designs This chapter pr ovides o ver view information and instructions for the types of AirP or t Extreme networks you can set up , and some of the advanc ed options of AirP or t Ex treme. Use this chapter to design and set up y our AirPort Extreme network. Configuring your A pple wireless device t o implement a network des[...]

Chapter 3 AirPort Network Designs 15 Using AirP or t Utility T o set up and configure your computer or Apple wirele ss device to use AirP or t Extreme for basic wirele ss networking and Internet access , use AirP or t Utility and answer a series of questions about your In ternet settings and how you w ould lik e to set up your network. 1 Open AirP [...]

16 Chapter 3 AirPort Network Designs Select from the following checkboxes: Â Select “Check for Update s when opening AirP or t Utilit y ” to automatically check the Apple website f or sof tware and firmware updates each time y ou open AirP or t Utilit y . Â Select the “Check for update s” checkbox, and then choose a time inter val from th[...]

Chapter 3 AirPort Network Designs 17 If you can ’t open the wireless device settings: 1 Make sure your network and TCP/IP settings ar e configured properly . On a computer using Mac OS X, select AirP or t from the network connection ser vices list in the Network pane of System P references . Click Advanced , and then choose Using DHCP from the Co[...]

18 Chapter 3 AirPort Network Designs 3 Choose Base Station > Manual Setup and enter the password if nece ssar y . The default device password is public . Y ou can also double-click the name of the wireless device to open its configuration in a separate window . When you open the manual setup windo w , the Summar y pane is display ed. T he summar[...]

Chapter 3 AirPort Network Designs 19 If the wireless device reports a problem, the status icon turns yellow . Click Base Station Status to displa y the problem and suggestions to re solve it. Wireless Device Settings Click the AirP or t button, and then click Base Station or Time Capsule, depending on the device you ’re setting up , to enter inf [...]

20 Chapter 3 AirPort Network Designs Set Device Options Click Base Station Options and set the following: Â Enter a con tact name and location for the wireless device . The name and location are included in some logs the device generates. T he contact and location fields may be helpful if you ’ve more than one wir eless device on your netw ork. [...]

Chapter 3 AirPort Network Designs 21 Choosing the Radio Mode Choose 802. 1 1a/n - 802. 1 1b/g from the R adio Mode pop-up menu if computers with 802. 1 1a, 802. 1 1n, 802. 1 1g, or 802. 1 1b wireless cards will join the network. Each client computer will connect to the network and transmit netw ork traffic at the highest possible speed . Choose 802[...]

22 Chapter 3 AirPort Network Designs  WP A/WP A2 P ersonal: Choose this option to protect your network with Wi-Fi Pr otected Access . Y ou can use a password between 8 and 63 ASCII characters or a Pre-Shar ed Key of exactly 64 hexadecimal charac ters. Computers that support WP A and computers that support WP A2 can join the network. Choose WP A2 [...]

Chapter 3 AirPort Network Designs 23 Setting Additional Wireless Options Use the Wireless Options pane to set the following: Â 5 GHz network name: Pr ovide a name for the 5 GHz segmen t of the dual-band network if you wan t it to hav e a differen t name than the 2.4 GHz netw ork. Â Coun try : Choose the country for the location of your network fr[...]

24 Chapter 3 AirPort Network Designs Setting up a Guest Network Click Guest Network and then ent er the network name and other options for the gue st network. When you set up a guest netw ork, a por tion of your connection to the Internet is re ser ved for “ guests” , wireless clients that can join the guest network and connect to the Internet [...]

Chapter 3 AirPort Network Designs 25 What It Looks Like How It Works  The Apple wirele ss device (in this example, a Time C apsule) connects to the Internet through its Internet W AN ( < ) connection to your DSL or cable modem.  Computers using AirP or t or computers connected to the wirele ss device ’ s Ethernet LAN port ( G ) connec t to[...]

26 Chapter 3 AirPort Network Designs What to D o If you ’ re using AirP or t Utilit y to assist you with configuring the A pple wireless devic e for Int ernet access: 1 Open AirP or t Utilit y , located in the Utilities folder in the A pplications folder on a Mac, or in Star t > All Programs > AirP or t on a Windows c omputer . 2 F ollow th[...]

Chapter 3 AirPort Network Designs 27 Â If you chose PPP oE, your ISP pro vides your IP addre ss automatically using DHCP . If your service provider asks you for the MA C address of your wir eless device , use the address of the Ethernet W AN por t ( < ), printed on the label on the bottom of the device. If you ’ve already used AirP or t Utili[...]

28 Chapter 3 AirPort Network Designs If you configure T CP/IP using DHCP , choose U sing DHCP from the Configur e IPv4 pop-up menu. Y our IP information is provided a utomatically by your ISP using DHCP . 5 If you chose PPP oE from the Connect Using pop-up menu, enter the PPP oE settings your service provider gave y ou. Leav e the S er vice Name fi[...]

Chapter 3 AirPort Network Designs 29 If you ’ re connecting to the Internet through a router that uses PPP oE to connect to the Internet, and your wireless device is connected to the router via E thernet, you do not need to use PPP oE on your device. Choose Ethernet from the Connect Using pop-up menu in the Internet pane , and deselect the “Dis[...]

30 Chapter 3 AirPort Network Designs  Enter Domain Name System (DNS) server addresses and a s p ecific domain name your wireless device acce sses when you connect to the Int ernet. 7 Click the Network button and configur e how the device will share its Int ernet access with AirP or t and Ethernet computers. If you chose Ethernet from the C onnect[...]

Chapter 3 AirPort Network Designs 31 Â If you don ’t want your wireless device t o share its IP address , choose “Off (Bridge Mode).” If you set up your device in bridge mode, AirPort computers have acc ess to all ser vices on the Ethernet netw ork, and the device does not provide Internet sharing ser vices. S ee “Y ou’ re Using an Exist[...]

32 Chapter 3 AirPort Network Designs  T o provide specific IP addresses t o specific computers on y our wireless network, click the Add (+) button below the DHCP Re servations list, and follow the onscreen instructions to name the reservation and reserve the address by MA C address or DHCP client ID . If you choose MAC addre ss, click Continue an[...]

Chapter 3 AirPort Network Designs 33 Y ou can also set up por t mapping. T o ensure that requests are properly routed t o your web , AppleShare , or FTP server , or a specific computer on your network, you need to establish a permanent IP addre ss for the server or computer , and pr ovide “inbound por t mapping” information to the A pple wirele[...]

34 Chapter 3 AirPort Network Designs Next, choose DHCP from the Configure IPv4 pop-up menu. b If you enabled a DHCP server when you set up the wireless device ’ s network, and the client computer is using E thernet, select Ethernet in the network connection ser vices list, and then choose Using DHCP from the Configure pop-up menu .[...]

Chapter 3 AirPort Network Designs 35 c If you selected “Distribute a range of IP addresses” when you set up the wireless device ’ s network, you can provide Internet acce ss to client computers using Ethernet by setting the client IP addr esses manually . Select Ethernet in the network connection services list, and then choose M anually from [...]

36 Chapter 3 AirPort Network Designs 5 Click Internet P rotocol V ersion 4 ( T CP/IPv4), and then click Properties. Â If you chose “Share a public IP address” in the Network pane of AirP ort Utilit y , select “Obtain an IP address a utomatically .” Â If you chose “Distribute a range of IP addresses” when you set up the wireless device[...]

Chapter 3 AirPort Network Designs 37 Y ou’ re Using an Existing Ethernet Network Y ou can use AirPort Utility to easily set up the Apple wireless device for In ternet access through an existing Ethernet network that alr eady has a router , switch, or other network device pro viding IP addresses . Use the manual setup features of AirP or t Utility[...]

38 Chapter 3 AirPort Network Designs What to D o If you ’ re using AirP or t Utilit y to help you set up an Ap ple wireless device on an existing Ethernet network: 1 Open AirP or t Utilit y , located in the Utilities folder in the A pplications folder on a Mac, or in Star t > All Programs > AirP or t on a Windows c omputer . 2 Click Continu[...]

Chapter 3 AirPort Network Designs 39 If your IP address is pro vided by DHCP , choose Using DHCP from the Configure IPv4 pop-up menu. 5 Choose Off (Bridge Mode) from the Connection Sharing pop-up menu. Y our wireless device “bridges” the Ethernet networks Int ernet connection to computers connected to the device wirelessly or by E thernet. See [...]

40 Chapter 3 AirPort Network Designs Connecting Additional Devic es to Y our AirP or t Ex treme Network Connect a USB printer to the USB port of your Apple wirele ss device (in this example, a Time Capsule) and ever yone on the network can print t o it. Connect a USB hub to the USB port of an AirPort Extreme Base Station or a Time C apsule, and the[...]

Chapter 3 AirPort Network Designs 41 Using Apple T V on Y our AirPort Extreme Network to Play C ontent from iT unes When you connect Apple T V to your AirP or t Extreme network wirelessly , or using Ethernet, and then connect Apple T V to your widescreen T V , you can enjoy your favorit e iT unes content including mo vies, T V shows, music, and mor[...]

42 Chapter 3 AirPort Network Designs Setting Up Roaming Several AirP or t Ex treme Base Stations or Time Capsules can be set up to create a single wireless network. Client computers using AirP or t can move from device to device with no interruption in service (a process known as roaming ). T o set up roaming: 1 Connect all of the AirP or t Ex trem[...]

Chapter 3 AirPort Network Designs 43 Extending the Range of an 802. 1 1n Netw ork Extending the range of an 802. 1 1n network is simpler if you’ re connecting another 802. 1 1n device. Connecting two Apple 802. 1 1n wireless devices makes the WDS setup process more straightf or ward. T o extend the range of an 802. 1 1n network: 1 Open AirP or t [...]

44 Chapter 3 AirPort Network Designs 8 Click Update to update the device with new netw ork settings. Con trolling the R ange of Y our AirP or t Network Y ou can also shor ten the range of your AirP or t network. This might be useful if you want to con trol who has access to the netw ork by restricting the range to a single room, for example. T o sh[...]

Chapter 3 AirPort Network Designs 45 Keeping Y our Network Secure Y our network is protected by the password y ou assign to it. However , you can take additional steps to help keep your network secur e. Networks managed by Simple Netw ork Management Pr otocol (SNMP) may be vulnerable to denial-of-service attacks. Similarly , if you c onfigure your [...]

46 Chapter 3 AirPort Network Designs P ersonal mode is for the home or small office network and can be set up and managed by most users. P ersonal mode does not require a separate authentication ser ver . Netw ork users usually only need to enter a user name and passw ord to join the network. Note: If you change an existing WDS network from WEP to [...]

Chapter 3 AirPort Network Designs 47 Setting Up Access C ontrol Access c ontrol lets you s p ecify which computers can send or receiv e information through the wireless device t o the wired network. Each wireless-enabled computer has a unique MA C address. Y ou can restrict access by creating an access con trol list that includes only the MA C addr[...]

48 Chapter 3 AirPort Network Designs  If you choose RADIUS, enter the type of RADIUS ser vice, the RADIUS IP addresses, shared secret, and primary por t for the primar y RADIUS ser ver . Enter the inf ormation for the secondary RADIUS ser ver if there is one. Check with the ser ver administrator if you don ’t have that inf ormation. Important: [...]

Chapter 3 AirPort Network Designs 49 5 Enter the IP addre ss, por t, and shared secret (or password) for the primary and secondary ser vers. See the RADIUS documentation that came with your server , or check with the network administrator for more inf ormation on setting up the RADIUS ser ver . The access con trol list and RADIUS work t ogether . W[...]

50 Chapter 3 AirPort Network Designs If you ’ re using a web , AppleShare, or FTP ser ver on your AirP or t Extreme network, other computers initiate communication with y our server . Beca use the Apple wireless devic e has no table entries f or these requests , it has no way of directing the information to the appropriate computer on y our AirPo[...]

Chapter 3 AirPort Network Designs 51 T ype any additional information you need in the text fields. T o use por t mapping, you must configure TCP/IP manually on the computer that is running the web , AppleShare , or FTP ser ver . Y ou can also set up a computer as a default host to establish a permanen t IP address for the c omputer and provide inbo[...]

52 Chapter 3 AirPort Network Designs 3 Enter the IP addre ss of the computer that will receiv e the logs in the Syslog Destination Address field . 4 Choose a level from the Syslog L evel pop-up menu. Y ou need to assign a Network Time Protocol (NTP) server for each wirele ss device , so the log information will contain the accurat e time of the sta[...]

Chapter 3 AirPort Network Designs 53 Setting up IPv6 IPv6 is a new version of Internet P rotocol (IP). IPv6 is currently used primarily by some research institutions . Most computers do not need to set up or use IPv6. The primary advantage of IPv6 is that it increases the addre ss size from 3 2 bits (the current IPv4 standard) t o 1 28 bits. An add[...]

54 Chapter 3 AirPort Network Designs Sharing and Securing USB Hard Disks on Y our Network If you connect a USB hard disk to your AirP or t Extreme Base Station or Time Capsule , computers connected to the netw ork—both wireless and wired , Mac and Windows— can use it to back up , stor e, and share files. If you ’ re using a Time Capsule, you [...]

Chapter 3 AirPort Network Designs 55 Using a Time Capsule in Y our Network If you ’ re using a Time Capsule and a computer with Mac OS X L eopard (v1 0.5 .2 or later), you can use Time Machine to automatically back up all of the computers on the network that are using L eopard . O ther Mac computers and Windows computers can access the Time Capsu[...]

56 Chapter 3 AirPort Network Designs  On a computer using Windows, install Bonjour for Windows from AirP or t Utilit y CD, and follow the onscreen instructions to connect to the prin ter . Y ou can change the name of the printer from the default name to one y ou choose. T o change the name of your USB printer: 1 Open AirP or t Utilit y , select y[...]

Chapter 3 AirPort Network Designs 57 Solving Pr oblems If you have tr ouble connecting to the Internet with an y AirP or t Ex treme network design, tr y the following: On a computer using Mac OS X: Â Make sure the wireless device is connected to the Int ernet. The computers on y our AirP or t network cannot connect to the Internet if your device i[...]

58 Chapter 3 AirPort Network Designs  Make sure that the computer has joined the AirP or t network created by your wir eless device.  Restart your computer . T his renews the IP address y ou receive fr om the wireless device. The IP addresses should be in the range of 1 0.0. 1 .2 to 1 0.0. 1 .200, 1 72. 1 6. 1 .2 to 1 72. 1 6. 1 .200, or 1 92. [...]

4 59 4 Behind the Scene s This chapter define s terms and conc epts used to discuss computer netw orks. Use it as a ref erence to help y ou understand what is taking place behind the scenes of y our AirP or t wireless network. Basic Networking P ackets and T raffic Information trav els across a network in chunks called packets. Each pack et has a h[...]

60 Chapter 4 Behind the Scenes So , your computer also has an Internet P rotocol (IP) address that defines exactly where and in what network it’ s located. IP addresses ensure that your local Ethernet netw ork receive s only the traffic intended for it. Lik e the hierarchical system used to define zip codes , street names, and street numbers, IP [...]

Chapter 4 Behind the Scenes 61 Using the Time Capsule This section describes the differ ent network in terfaces of the Time Capsule and describes the functions it can provide . Time Capsule Int er faces T o use your Time Capsule , you configure how its networking interfaces will be used. The Time Capsule has five hardware netw orking inter faces: ?[...]

62 Chapter 4 Behind the Scenes  Audio ( - ) int er face: Use the analog and optical digital audio stereo mini-jack to connect an AirP ort Express to a home stereo or power ed speakers. Apple Wireless Device F unctions  Bridge: Each Apple wireless device is configur ed by default as a bridge betw een the wireless AirP or t network and the wired [...]

Chapter 4 Behind the Scenes 63 Items That Can Cause In ter ferenc e with AirP or t The farther away the interference source , the le ss likely it is to cause a problem. The follo wing items can cause int er ference with AirP or t communication:  Microwave o vens  DSS (Direct Satellite Ser vice) radio frequency leakage  The original coaxial ca[...]

Glossary 64 Glossar y 1 0Base-T The most common cabling method f or Ethernet. 1 0Base-T conforms to IEEE standard 802.3 . I t was developed to enable data communications ov er unshielded twisted pair (telephone) wiring at speeds of up t o 1 0 megabits per second (Mbps) up to distances of appro ximately 3 30 feet on a netw ork segment. 1 0/1 00Base-[...]

Glossary 65 backbone The central part of a large network that links two or more subnetw orks. The backbone is the primar y data transmission path on large networks such as those of enterprises and service providers. A back bone can be wireless or wired . bandwidth The maximum transmission capacity of a communications channel at any point in time . [...]

66 Glossary channel One por tion of the available radio s pec trum that all devices on a wireless network use to communicat e. Changing the channel on the access point/rout er can help reduce int er ference . client Any c omputer or device connected to a netw ork that requests files and services (files, print capabilit y) from the ser ver or other [...]

Glossary 67 firewall A system of software and/or hardwar e that resides betw een two networks to prevent acc ess by unauthoriz ed users. The most common use of a firewall is to provide security between a local network and the Internet. Firewalls can make a network appear invisible to the In ternet and can block unauthoriz ed and unwanted users from[...]

68 Glossary LAN Local area netw ork. A system of connecting PCs and other devices within the same physical pro ximity for sharing resource s such as an Internet connections , printers, files, and drives. When Wi-Fi is used t o connect the devices, the system is known as a wireless LAN or WLAN. S ee W AN. MAC addre ss Media Access C ontrol addre ss.[...]

Glossary 69 roaming ( Wi-Fi) The ability to move fr om one area of Wi-Fi cov erage to another with no loss in connectivity (hand-off ). router A wireless r outer is a device that accepts connections from wirele ss devices to a network, includes a network firewall f or securit y , and pr ovides local netw ork addresses . See hub. server A computer t[...]

70 Glossary WEP Wired equivalen t privacy . The original security standard used in wireless networks to encrypt the wireless network traffic. S ee WP A, Wireless local area network. Wi-Fi A t erm developed by the Wi-Fi Allianc e to describe wirele ss local area network ( WLAN) products that are based on the Institute of Electrical and Elec tronics [...]

Glossary 71 WP A2 - Enterprise Wi-F i Protected Acce ss 2 - Enterprise. T he follow-on wir eless security method to WP A that provide s stronger data protection for multiple users and large managed networks . I t prevents una uthorized network acce ss by verifying network users through an a uthentication server . See WP A2. WP A2 - P ersonal Wi-F i[...]

www .apple.com/airportex treme www .apple.com/airport © 2009 Apple Inc. All rights reserved. Apple, the Apple logo, AirPort, AirP ort Ex treme, AppleShare, Apple T alk, Back to My Mac, Bonjour , Mac, and Mac OS are trademarks of Apple Inc., registered in the U.S. and other c ountries. AirPort Express, AirTunes , Time Capsule, and Time Machine are [...]