NetworkAddressTranslator suggesttions

[cTurtle98]

This is my network currently:

 

Modem

V

Airport extreme (2nd gen) (flat boxy one that looks like an oversized apple tv)

V

clients on ethernet and wifi

 

I dont like this system because i do not like the interface for NAT on airport extreme, also i wan enterprise security with usernames and passwords

i want to make the airport extreme run in access point only mode

 

anyone know of a good "router" that is just a NAT and a firewall but no access point stuff or switch (just input and output)

 

Thanks

[tt2468]

1 minute ago, cTurtle98 said:

This is my network currently:

 

Modem

V

Airport extreme (2nd gen) (flat boxy one that looks like an oversized apple tv)

V

clients on ethernet and wifi

 

I dont like this system because i do not like the interface for NAT on airport extreme, also i wan enterprise security with usernames and passwords

i want to make the airport extreme run in access point only mode

 

anyone know of a good "router" that is just a NAT and a firewall but no access point stuff or switch (just input and output)

 

Thanks

You mean usernames and passwords on wifi? Or for the entire network?

[Skiiwee29]

If your looking to run a username/password then you would need to setup an 802.1x server. This would allow you to have a username/password authentication for users. 

 

https://en.wikipedia.org/wiki/IEEE_802.1X

[cTurtle98]

1 minute ago, tt2468 said:

You mean usernames and passwords on wifi? Or for the entire network?

the one that requires a RADIUS auth server (i want the NAT to run the radius server)

[cTurtle98]

I have some old computers I use to run my web server that I can have run the RADIUS server if having it bundled with the NAT makes it alot more expesive

[tt2468]

1 minute ago, cTurtle98 said:

the one that requires a RADIUS auth server (i want the NAT to run the radius server)

Why? RADIUS is a VERY complicated system that most IT pros have issues doing. What kind of network are you running that requires more security than simple wpa2?

[Skiiwee29]

http://freeradius.org/

 

Here is something you could look at doing. 

[cTurtle98]

1 minute ago, tt2468 said:

Why? RADIUS is a VERY complicated system that most IT pros have issues doing. What kind of network are you running that requires more security than simple wpa2?

is there another option to radius for having a username and password to login to the wifi instead of just a passoword ?

[tt2468]

11 minutes ago, cTurtle98 said:

is there another option to radius for having a username and password to login to the wifi instead of just a passoword ?

RADIUS has mostly been replaced by captive portal systems. You can find captive portal features in Cisco Meraki and UBNT Unifi.

[cTurtle98]

13 hours ago, tt2468 said:

RADIUS has mostly been replaced by captive portal systems. You can find captive portal features in Cisco Meraki and UBNT Unifi.

is captive portal the one where you have a wifi network with no password and when you join you get sent to a website where you have to login ?

[tt2468]

4 minutes ago, cTurtle98 said:

is captive portal the one where you have a wifi network with no password and when you join you get sent to a website where you have to login ?

Yes. You can also set your own password too.