Restrict port usage with an Airport Extreme?

[carlsson]

Situation:
Incoming internet -> Router -> Switch -> Airport Extreme

I am not able to use the APEX as a router due to variuos reasons. Hence, it's set in Bridged mode. WiFi work as it should.

Problem:
I want to setup a WiFi Guest network. If I do that as it is now (turn on Guest Network in the APEX settings), it doesn't work. I guess that the APEX needs to be the router for it to work.
So, I want to restrict the "real" WiFi to accept only port 80, 21 and 25.
– Ie, everyone that uses the WiFi should only be able to use internet, check mail and FTP.


I have looked at the settings, but I'm not able to sort it out. How do I do this?

 

[waw74]

but not 443, so no https?

no way to do that on the express...

You may have some luck with dd-wrt or tomato or one of the other more customizable firmwares, but you would need a diffferent router.

or maybe something with a rasberry-pi with a customized routing table.

 

[dyt1983]

edit: To remove personally identifying information not relevant to the thread.

 

[carlsson]

Not the answers I wanted, but what I was afraid of.

Thank you guys!

PS. I just saw that I had written "Express", but it's an Airport Extreme. Does that change anything?

 

[dyt1983]

edit: To remove personally identifying information not relevant to the thread.

 

[Altemose]

Not the answers I wanted, but what I was afraid of.

Thank you guys!

PS. I just saw that I had written "Express", but it's an Airport Extreme. Does that change anything?

If the AirPort is in bridge mode, then port assignments and restrictions would not make a difference. Your router in which the AirPort is connected to should allow you to change those settings. Make sure the AirPort is in a static configuration first or a DHCP reservation to avoid the address changing.