Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: How to firewall a router from network shares?


18 Mar 2014   #1

7 Pro x64
 
 
How to firewall a router from network shares?

I have AT&T uVerse.

CAT5 out of the uVerse box into a wired switch.

A bunch of computers plugged into the switch and sharing files. They are all in a Windows workgroup (not Homegroup).

Then, an Airport Extreme is also plugged into the switch. When I connect to the Airport, I can still see all the computers plugged into the switch.

Is there a way to make those devices connected via the Airport not be able to see anything but the public internet? I basically want to use the Airport as a restricted guest network.


My System SpecsSystem Spec
.

18 Mar 2014   #2

Windows 7 Ult, Windows 8.1 Pro,
 
 

The Airport Extreme like most modern routers have a guest wireless network which can be enabled in order to isolate the guest from the rest of the network. You should be able to find the setting some place in the firmware under wireless set up.

The following link gives more specific instructions for setting this up.

AirPort base stations: About the Guest network feature
My System SpecsSystem Spec
18 Mar 2014   #3

7 Pro x64
 
 

Thanks, that worked, but here's what I had to do.

Since my Airport was plugged into a switch, and not directly into the modem, it defaulted to Bridge mode. But, when in Bridge mode, Airports disable the Guest Network.

I switched from Bridge mode to "Share a Public IP." This still did not make the Guest Network option show up, but, now when I connect to my Airport network, I cannot see all my network shares (as I desired). So, it solved the problem in a way.

I also get a "Double NAT" warning from my Airport now.

Any comments on what I've done or recommendations for a better setup?
My System SpecsSystem Spec
.


18 Mar 2014   #4

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by Jakeleg View Post
Thanks, that worked, but here's what I had to do.

Since my Airport was plugged into a switch, and not directly into the modem, it defaulted to Bridge mode. But, when in Bridge mode, Airports disable the Guest Network.

I switched from Bridge mode to "Share a Public IP." This still did not make the Guest Network option show up, but, now when I connect to my Airport network, I cannot see all my network shares (as I desired). So, it solved the problem in a way.

I also get a "Double NAT" warning from my Airport now.

Any comments on what I've done or recommendations for a better setup?
I would think that just mentioning using the Guest Network would be enough to solve the issue.

When ever you plug a secondary router into a switch it's usually required to turn off DHCP in order for the added router to pick up the default gateway IP from the first router. You never mentioned if this was done or not?

I believe it defaulted to bridge mode in order to disable it's own DHCP or, in the case of a router/modem combo unit disabling the bridge mode would remove the modem from the equation. This is also the reason for dual NAT error. I'm not sure if this Airport Extreme is a combo or not, I don't keep up with every version of these Airport router/modem's.

The link mentions that bridge mode needs to be turned off for the Guest network to work but other than that I really have no idea what would make the Guest network "show up" on this particular router's firmware settings as there are a million different firmware settings for a million different routers and every one of them is different.

With my routers it's very easy as the Guest network settings are right there but I'm not familiar with the Airport Extreme as it's an apple product and I'm a Windows guy.

Sharing a Public IP is basically saying it's outside the regular network but for more specific instructions I'd look into the Airport's user manual.
My System SpecsSystem Spec
18 Mar 2014   #5

7 Pro x64
 
 

Thanks, unfortunately Apple's manual doesn't really address these things. I've only been able to figure out what I've described from other searches. Blind person leading his blind self.

Re: DHCP> I still want this "guest network" to be able to host numerous devices. Don't I have to have DHCP on for that?
My System SpecsSystem Spec
18 Mar 2014   #6

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by Jakeleg View Post
Thanks, unfortunately Apple's manual doesn't really address these things. I've only been able to figure out what I've described from other searches. Blind person leading his blind self.

Re: DHCP> I still want this "guest network" to be able to host numerous devices. Don't I have to have DHCP on for that?
Well normally when we connect a secondary router or access point to a network that already has a router with DHCP then you would need to turn off DHCP on the secondary router so that everything is in the same subnet, using the same gateway etc. This is true in every case that I know of so I don't think it would be different in your case.

I'm not completely sure how this particular router handles Guest wireless accounts but usually DHCP for the entire network is handled by the gateway "first" router which is connected to the modem, while the secondary router becomes an access point on the same subnet as soon as you disable DHCP.

So try disabling DHCP on the secondary router and see if the actual Guest wireless account shows up. You should be able to issue this Guest account a completely different SSID, password etc. as was mentioned in the link I posted earlier. Anyone joining this Guest wireless account won't have access to anything in the regular network.
My System SpecsSystem Spec
18 Mar 2014   #7

7 Pro x64
 
 

Great explanation... trying now.

Turns out that "Bridge Mode" is the same as turning off DHCP, and, on Airports, when you are on Bridge Mode, the Guest Network option disappears.

So, it's still a mystery how to have the Airport Guest Network show up while also not giving Double NAT warnings.
My System SpecsSystem Spec
18 Mar 2014   #8

7 Pro x64
 
 

None of this has worked.

Anyone who connects to my Airport can see all the computers connected on the same switch with it.
My System SpecsSystem Spec
18 Mar 2014   #9

7 Pro x64
 
 

Back to my original question... how can I isolate this network from the workgroup and other computers (not using Airport's guest network feature)?
My System SpecsSystem Spec
19 Mar 2014   #10

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by Jakeleg View Post
Back to my original question... how can I isolate this network from the workgroup and other computers (not using Airport's guest network feature)?
Since the Airport "what a POS" isn't up to the task you can simply change the Workgroup name on the machines that require an isolated network. Change to something other than the default Workgroup.

Workgroup Name - View and Change

Or you can set up a Homegroup between the trusted machines while keeping the other machines in the workgroup. This creates isolation of network machines, the Workgroup machines can still see the Homegroup machines but won't be able to access any files unless they are purposely shared with "Everyone" via the Homegroup sharing settings.

Homegroup - Create
My System SpecsSystem Spec
Reply

 How to firewall a router from network shares?




Thread Tools



Similar help and support threads for2: How to firewall a router from network shares?
Thread Forum
How to access shares with firewall enabled Network & Sharing
Solved Can't share network with firewall on, can't reset firewall to default Network & Sharing
Solved Windows Firewall vs Router Firewall System Security
BSOD when accessing network or network shares via Wireless BSOD Help and Support
Comodo Firewall - the network firewall is not functioning properly ! System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 08:02 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33