C Webber writes:
Here's the scenario: A friend or relative is visiting and wants Internet access, which you're happy to provide. But for whatever reason, you have misgivings about giving them open access to everything else on your home network. What should you do? There's a solution, if you have an AirPort Extreme, AirPort Express, or Time Capsule of relatively recent (2009-later) vintage.
There are myriad reasons for wanting to isolate guests from the rest of your network. Maybe you have open computers sharing files you'd prefer not to have get into the wrong hands. Maybe you don't want them wasting your precious (and expensive) inkjet cartridges printing out cat pictures off the Internet. Or maybe you just can't be sure that friends and relatives who will be accessing your home Internet connection are going to exercise the same common sense that you do, and may make themselves susceptible to malware, adware, and other nefarious Internet problems that you'd prefer not to introduce to the rest of your computers.
If you're using an AirPort Extreme or Time Capsule, you're in luck, because Apple's AirPort Utility enables you to create a guest network that still provides users with access to the Internet — without compromising the security of other devices.
Before you begin, take note that if you have your AirPort device set up in "Bridge" mode — which defers off things like DHCP and network address translation (NAT), protocols necessary for devices on your network to get an IP address — then this won't work. So it may take some rejiggering of your network setup to get it all in order, and that may mean reconfiguring your cable modem.
This feature isn't unique to Apple routers, of course, so if you're not using an AirPort Extreme, AirPort Express or Time Capsule, check your router's documentation to see if it's a supported capability. But here's how you do it with an Apple device.
To set up a guest network
- Type Command + Space on your Mac's keyboard to bring up Spotlight Search.
- Start typing in Airport Utility and click on it or hit Enter on your keyboard when it appears.
- Click on the picture of your main Airport Base Station.
- Click the Edit button in the popup menu.
- Click the Wireless tab.
- Select Enable Guest Network.
- Give the guest network a name.
- Select the appropriate security protocol from the Guest Network Security pop-up menu, then enter a password.
Peter, I have a Motorola surfboard modem with Wi-Fi model SBG 6580. I have been very disappointed with the performance of the Wi-Fi side of things, so I recently purchased an Apple Airport Extreme to use in place of the Motorola Wi-Fi. I am very impressed with the ease of set-up and the reach of the Wi-Fi signal. however during set-up I was instructed to use "bridge mode" that you spoke about. and as you pointed out, I cannot use the guest network feature...what exactly do you mean by some "rejiggering" to be able to use the guest network ? I have exceeded my technical knowledge with DCHP and NAT. can you provide some technical insight? Thanks in advance.
If you can turn the Surfboard's bridge mode on, then you can let the AirPort Extreme handle DHCP and NAT duties instead.
The way I handle that I use the WiFi provided by the Time Capsule (which is in bridge mode) for myself, and let guests use the WiFi provided by the cable modem. That gets them onto a separate network from my own computers. May not work for you if the Surfboard's WiFi performance is truly unacceptable, though.
Great article, Peter!
For instance, I use AP extreme as bridge (primary) just because for creating guest n/w if I reconfigure AP "Share a single IP address using DHCP and NAT" (still APE connected with external router) will this reconfiguration of base station cause any issue ?
Thanks Peter! Going to put this to work tonight!
Thank you for signing up to iMore. You will receive a verification email shortly.
There was a problem. Please refresh the page and try again.