{"id":1025,"date":"2013-02-08T15:28:45","date_gmt":"2013-02-08T15:28:45","guid":{"rendered":"http:\/\/www.autoitconsulting.com\/site\/?p=1025"},"modified":"2025-07-14T23:11:23","modified_gmt":"2025-07-14T22:11:23","slug":"configuring-an-airport-extreme-for-nat-only-mode","status":"publish","type":"post","link":"https:\/\/www.autoitconsulting.com\/site\/networking\/configuring-an-airport-extreme-for-nat-only-mode\/","title":{"rendered":"Configuring an AirPort Extreme for NAT Only Mode"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Overview<\/h2>\n\n\n\n<p>This post will show how you can use an configure an AirPort Extreme for NAT only mode so that you can allow an additional DHCP server on your network to handle IP address allocation. The instructions are for the AirPort Extreme in the Time Capsule, but I believe this should be the same for a standard AirPort Extreme as well.<\/p>\n\n\n\n<p>I recently got an Apple Time Capsule to replace my old linksys cable router. It&#8217;s a great little unit but one thing was causing me an issue with my home setup and I couldn&#8217;t initially get it to play nice with my home network.<\/p>\n\n\n\n<p>Due to the nature of my work I have quite a few machines on my home network. These are using for testing out various bits of Microsoft software such as System Center Configuration Manager and MDT. This involves a number of virtual and physical hosts, a full Microsoft Active Directory, DHCP and DNS setup. I also have a number of virtual client machines which are constantly rebuilt for testing. The way I have it setup is that the Microsoft DHCP server is responsible for allocating IP addresses and it causes the clients to use the Microsoft DNS (along with the Dynamic DNS registrations) along with some other specific DHCP scope options. The Microsoft DNS is setup to forward external DNS requests to the router. This ensures that all the Microsoft clients can correctly register themselves in the Microsoft DNS but can still access the internet directly. All my other non-Microsoft devices (laptop, iPad, TV, etc.) can work normally as well.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The Problem<\/h2>\n\n\n\n<p>For this setup to work, all I do is to turn off the DHCP server on the router so that the Microsoft DHCP server can take over. This is where the problems started because you don&#8217;t have that option in the interface for the Router Mode. You only get these options:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"\/site\/wp-content\/uploads\/2013\/02\/dhcp_nat_options_854x234.png\"><img loading=\"lazy\" decoding=\"async\" width=\"854\" height=\"234\" src=\"\/site\/wp-content\/uploads\/2013\/02\/dhcp_nat_options_854x234.png\" alt=\"\" class=\"wp-image-1039\" title=\"AirPort Extreme Router Mode\" srcset=\"https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_nat_options_854x234.png 854w, https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_nat_options_854x234-768x210.png 768w, https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_nat_options_854x234-300x82.png 300w\" sizes=\"auto, (max-width: 854px) 100vw, 854px\" \/><\/a><\/figure>\n\n\n\n<p class=\"has-text-align-center\"><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>DHCP and NAT<\/strong> &#8211; This is the default mode and it runs a DHCP server and lets clients access the internet.<\/li>\n\n\n\n<li><strong>DHCP Only<\/strong> &#8211; This runs a DHCP server but doesn&#8217;t function as a router.<\/li>\n\n\n\n<li><strong>Off (Bridge Mode)<\/strong> &#8211; This is just used for acting as a wifi extender.<\/li>\n<\/ul>\n\n\n\n<p>None of these modes work for me. What I actually need is an AirPort Extreme &#8220;NAT Only&#8221; router mode that doesn&#8217;t exist.<\/p>\n\n\n\n<p>If you have more than one DHCP server on a LAN then both will try and hand out IP addresses to clients, but the client will register with the first server that responds. My solution was to configure the Time Capsule so that it was running in the DHCP and NAT mode so that it could be correctly used as an internet gateway, but I would configure it so that it had no free IP addresses to hand out. This would mean that any clients would only be able to successfully request an IP address from my Microsoft DHCP server.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The Solution<\/h2>\n\n\n\n<p>My solution is:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><span style=\"line-height: 13px;\">Set the Router Mode to &#8220;DHCP and NAT&#8221;.<\/span><\/li>\n\n\n\n<li>Create the smallest possible DHCP range (2 IP addresses in the AirPort software).<\/li>\n\n\n\n<li>Create &#8220;dummy&#8221; reservations for the DHCP range so that the addresses can&#8217;t actually be used.<\/li>\n<\/ul>\n\n\n\n<p>Here is how I configured it. I&#8217;ll be using the IP range of 192.168.0.x<\/p>\n\n\n\n<p>Open the AirPort utility and go to the&nbsp;<strong>Network<\/strong> tab. Set the Router Mode to &#8220;DHCP and NAT&#8221; as shown in the screenshot above.<\/p>\n\n\n\n<p>Click the&nbsp;<strong>Network Options&#8230;<\/strong> button and setup the DHCP for the&nbsp;<strong>192.168<\/strong> network and the range will be from&nbsp;<strong>253<\/strong> to&nbsp;<strong>254<\/strong> then click&nbsp;<strong>Save<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"\/site\/wp-content\/uploads\/2013\/02\/dhcp_settings_964x3941.png\"><img loading=\"lazy\" decoding=\"async\" width=\"964\" height=\"394\" src=\"\/site\/wp-content\/uploads\/2013\/02\/dhcp_settings_964x3941.png\" alt=\"\" class=\"wp-image-1045\" title=\"AirPort Extreme DHCP Settings\" srcset=\"https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_settings_964x3941.png 964w, https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_settings_964x3941-300x123.png 300w, https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_settings_964x3941-768x314.png 768w\" sizes=\"auto, (max-width: 964px) 100vw, 964px\" \/><\/a><\/figure>\n\n\n\n<p class=\"has-text-align-center\"><\/p>\n\n\n\n<p>This will mean that the AirPort Extreme will have the address&nbsp;<strong>192.168.0.1<\/strong> and it will hand out the&nbsp;<strong>192.168.0.253<\/strong> and&nbsp;<strong>192.168.0.254<\/strong> addresses to clients. But we don&#8217;t want to the hand out&nbsp;<strong>any<\/strong> addresses! We get around this be creating a couple of dummy reservations. From the <strong>Network<\/strong> tab and in the <strong>DHCP Reservations<\/strong> section,&nbsp;click the&nbsp;<strong>+<\/strong> symbol.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"http:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_reservation_list_876x506.png\"><img loading=\"lazy\" decoding=\"async\" width=\"876\" height=\"506\" src=\"\/site\/wp-content\/uploads\/2013\/02\/dhcp_reservation_list_876x506.png\" alt=\"\" class=\"wp-image-1048\" title=\"AirPort Extreme DHCP Reservation List\" srcset=\"https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_reservation_list_876x506.png 876w, https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_reservation_list_876x506-768x444.png 768w, https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_reservation_list_876x506-300x173.png 300w\" sizes=\"auto, (max-width: 876px) 100vw, 876px\" \/><\/a><\/figure>\n\n\n\n<p class=\"has-text-align-center\"><\/p>\n\n\n\n<p>Now enter a new reservation with the name&nbsp;<strong>DummyReservation1<\/strong> and a MAC address of&nbsp;<strong>00:00:00:00:00:00<\/strong> and click&nbsp;<strong>Save<\/strong>.<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"\/site\/wp-content\/uploads\/2013\/02\/dhcp_add_reservation_858x334.png\"><img loading=\"lazy\" decoding=\"async\" width=\"858\" height=\"334\" src=\"\/site\/wp-content\/uploads\/2013\/02\/dhcp_add_reservation_858x334.png\" alt=\"\" class=\"wp-image-1047\" title=\"AirPort Extreme DHCP Add Reservation\" srcset=\"https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_add_reservation_858x334.png 858w, https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_add_reservation_858x334-300x117.png 300w, https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_add_reservation_858x334-768x299.png 768w\" sizes=\"auto, (max-width: 858px) 100vw, 858px\" \/><\/a><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>Add a second reservation with the name&nbsp;<strong>DummyReservation2<\/strong> and a MAC address of&nbsp;<strong>00:00:00:00:00:01<\/strong>&nbsp;and click&nbsp;<strong>Save<\/strong>. (Note: the two reservations must have different MAC addresses or they will vanish when you save the configuration).<\/p>\n\n\n\n<p>The DHCP Reservation list should now look like this:<\/p>\n\n\n\n<figure class=\"wp-block-image aligncenter\"><a href=\"\/site\/wp-content\/uploads\/2013\/02\/dhcp_reservation_list_complete_866_506.png\"><img loading=\"lazy\" decoding=\"async\" width=\"866\" height=\"506\" src=\"\/site\/wp-content\/uploads\/2013\/02\/dhcp_reservation_list_complete_866_506.png\" alt=\"\" class=\"wp-image-1051\" title=\"AirPort Extreme DHCP Reservation List\" srcset=\"https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_reservation_list_complete_866_506.png 866w, https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_reservation_list_complete_866_506-768x449.png 768w, https:\/\/www.autoitconsulting.com\/site\/wp-content\/uploads\/2013\/02\/dhcp_reservation_list_complete_866_506-300x175.png 300w\" sizes=\"auto, (max-width: 866px) 100vw, 866px\" \/><\/a><\/figure>\n\n\n\n<p class=\"has-text-align-center\"><\/p>\n\n\n\n<p>Finally click&nbsp;<strong>Update<\/strong>&nbsp;to store and activate the new configuration. Remember that your other DHCP server is now in charge of handing out IP addresses in that range &#8211; in this case that is 192.168.0.2 to 192.168.0.252.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Overview This post will show how you can use an configure an AirPort Extreme for NAT only mode so that you can allow an additional DHCP server on your network to handle IP address allocation. The instructions are for the AirPort Extreme in the Time Capsule, but I believe this should be the same for [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":1027,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[64],"tags":[45,46],"class_list":["post-1025","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-networking","tag-dhcp","tag-networking"],"_links":{"self":[{"href":"https:\/\/www.autoitconsulting.com\/site\/wp-json\/wp\/v2\/posts\/1025","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.autoitconsulting.com\/site\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.autoitconsulting.com\/site\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.autoitconsulting.com\/site\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.autoitconsulting.com\/site\/wp-json\/wp\/v2\/comments?post=1025"}],"version-history":[{"count":5,"href":"https:\/\/www.autoitconsulting.com\/site\/wp-json\/wp\/v2\/posts\/1025\/revisions"}],"predecessor-version":[{"id":100132,"href":"https:\/\/www.autoitconsulting.com\/site\/wp-json\/wp\/v2\/posts\/1025\/revisions\/100132"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.autoitconsulting.com\/site\/wp-json\/wp\/v2\/media\/1027"}],"wp:attachment":[{"href":"https:\/\/www.autoitconsulting.com\/site\/wp-json\/wp\/v2\/media?parent=1025"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.autoitconsulting.com\/site\/wp-json\/wp\/v2\/categories?post=1025"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.autoitconsulting.com\/site\/wp-json\/wp\/v2\/tags?post=1025"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}