Apple Airport: Firewall Protection Or Not?

Apple's AirPort Extreme is a Wi-Fi base station that acts as a router, providing DHCP and NAT services for the network. While Apple and some users refer to it as having a built-in firewall, others argue that it is not a true firewall but rather a NAT (Network Address Translation) firewall or NAT firewall, which provides some protection. This NAT firewall is enabled when the AirPort Extreme is configured normally with default settings as a router to provide DHCP and NAT services for the network.

To access and enable the firewall on the AirPort Extreme, users can open the AirPort Utility, click on the AirPort Extreme, then click Edit, and select the Network tab. If the setting for Network Mode is DHCP and NAT, the NAT firewall is automatically enabled. If the Network Mode is set to Off (Bridge Mode), the firewall on the AirPort Extreme is disabled.

How to access the firewall on Apple Airport Extreme

The Apple AirPort Extreme does have a built-in NAT firewall. To access it, open the AirPort Utility application on your Mac. Click directly on the picture of the AirPort Extreme, then click Edit. Click the Network tab at the top of the window. If the setting for Network Mode is DHCP and NAT, the NAT firewall is automatically enabled. No adjustments are needed.

If the setting for Network Mode is Off (Bridge Mode), the firewall on the AirPort Extreme is disabled. If DHCP and NAT are enabled, the NAT firewall is "On". If the AirPort Extreme were in Bridge Mode (DHCP and NAT are off), then the firewall would not be enabled.

To set up port mapping on an 802.11n AirPort Extreme Base Station (AEBSn), either connect to the AEBSn's wireless network or temporarily connect directly, using an Ethernet cable, to one of the LAN ports of the AEBSn. Then use the AirPort Utility, in Manual Setup, to make these settings:

AEBSn - Port Mapping Setup

• Reserve a DHCP-provided IP address for the host device. Go to AirPort Utility > Select the AEBSn > Manual Setup > Internet > DHCP tab. On the DHCP tab, click the "+" (Add) button to enter DHCP Reservations. Enter the desired description of the host device, then enter the MAC Address and IPv4 Address.
• Set up Port Mapping on the AEBSn. Go to AirPort Utility > Select the AEBSn > Manual Setup > Advanced > Port Mapping tab. Click the "+" (Add) button, then enter the appropriate service, UDP port values, TCP port values, and IP address of the host server.

Does Apple Airport Express have a built-in firewall?

The Apple AirPort Express does have a NAT firewall. However, some users have stated that this is not a true firewall, and it cannot be turned off.

The NAT firewall is automatically enabled when the AirPort Express is configured with default settings as a router to provide DHCP and NAT service for the network.

To check if the NAT firewall is enabled, follow these steps:

• Open Macintosh HD > Applications > Utilities > AirPort Utility.
• Click on the AirPort Express, then click Edit.
• Click the Network tab at the top of the window.
• If the setting for Network Mode is DHCP and NAT, the NAT firewall is automatically enabled.

If the setting for Network Mode is Off (Bridge Mode), the firewall on the AirPort Express is disabled. In this case, your Mac's separate firewall settings can be enabled or disabled as needed.

Additionally, your modem also has a firewall that is likely enabled by default unless manually turned off.

How to check if the firewall is enabled and configured properly

The Apple AirPort Extreme and AirPort Express both have a NAT firewall built-in. If you want to check if the firewall is enabled and configured properly, follow these steps:

• Open Macintosh HD > Applications > Utilities > AirPort Utility.
• Click on the AirPort Extreme/Express, then click Edit.
• Click the Network tab at the top of the window.
• Check the setting for Network Mode:

• If the setting is DHCP and NAT, the NAT firewall is automatically enabled.
• If the setting is Off (Bridge Mode), the firewall on the AirPort is disabled.

In addition to the AirPort firewall, your Mac also has its own separate firewall setting, which can be enabled or disabled through System Preferences.

How to set up a network using an Apple Airport Extreme as a router

To set up a network using an Apple Airport Extreme as a router, follow these steps:

First, find a power source in a central location and connect the Apple Airport Extreme. This is important as the LRS Gateway, which should be placed at least one foot away from the router, will need to be connected to the router.

Next, on your iPad, go to Settings, then Wi-Fi, and scroll down to the "Set Up New AirPort Base Station" section. Here, you should see the Apple Airport Extreme router listed with a unique serial number. Select this router, and you will be prompted to create a new network. Enter a name and a strong password for your network, and select Next.

At this point, you will be asked to connect the router to an internet connection. If you choose to do so, plug an Ethernet cable into the internet port, marked with a dotted circle, on the router. If you choose not to connect to the internet, you can select "Next" and then "Continue Anyway".

The final step is Diagnostics and Usage data sharing, which you can set according to your preference.

Select Done to complete the process, and then open the Airport Utility app to view and edit your router's settings.

To confirm that your Apple Airport Extreme is functioning as a router, go to the Airport Extreme menu, select Advanced, then DHCP, NAT, and finally, Router Mode. Ensure that DHCP and NAT are selected.

Additionally, you can enable the NAT firewall on your Apple Airport Extreme by ensuring that DHCP and NAT are enabled in the router settings. This will provide an additional layer of security for your network.

If you wish to extend your network using an additional base station, you can physically connect the base stations using an Ethernet cable or connect them wirelessly. To connect using an Ethernet cable, plug one end into the WAN port on the new base station and the other end into a LAN port on the primary base station. Then, follow the on-screen instructions to complete the setup.

By following these steps, you can effectively set up and secure a network using an Apple Airport Extreme as a router.

How to set up port mapping on an Apple Airport Extreme Base Station

To set up port mapping on an Apple Airport Extreme Base Station, follow these steps:

First, ensure that your Airport Extreme Base Station is connected to your modem and powered on. Connect an Ethernet cable from your DSL or cable modem to the Ethernet WAN port on your base station. Then, plug the power cord into the Power port and connect it to a power outlet.

On your Mac, click the Wi-Fi icon in the menu bar and select the base station listed under "New AirPort Base Station." This will open the AirPort Utility, which you can also access by going to Applications > Utilities > AirPort Utility.

In the AirPort Utility, follow the onscreen instructions to set up your wireless device. If you are using an 802.11n AirPort Extreme Base Station, connect to the base station's Wi-Fi network or use an Ethernet cable to connect directly to one of the LAN ports.

Once connected, open the AirPort Utility and select your base station. Choose “Manual Setup" and navigate to the “Internet" tab. Here, you will find the DHCP tab. Click the "+" (Add) button to enter DHCP Reservations.

Enter the following information:

• Description: Enter a description of the host device.
• Reserve address by: Select "MAC Address."
• MAC Address: Enter the MAC or Ethernet ID of the host computer.
• IPv4 Address: Enter the desired Private (LAN-side) IP address you want to reserve from the DHCP pool.

Now, set up port mapping on the base station. In the AirPort Utility, select your base station, choose "Manual Setup," and navigate to the "Advanced" tab. Click the "+" (Add) button under the Port Mapping section.

Enter the following information:

• Service: Choose the appropriate service from the menu or skip if creating a custom port mapping.
• Public UDP Port(s): Enter the appropriate UDP port value(s).
• Public TCP Port(s): Enter the appropriate TCP port value(s).
• Private IP Address: Enter the IP address of the host device (from the previous step).
• Private UDP Port(s): Enter the same Public UDP Ports or your desired choice.
• Private TCP Port(s): Enter the same Public TCP Ports or your desired choice.

By following these steps, you will be able to set up port mapping on your Apple Airport Extreme Base Station.

Frequently asked questions