Apple Airport Extreme - EZ internet wizard

[aimbie]

When I try to use the EZ-Internet wizard to set up my router, an Apple Airport Extreme, it is not listed in the drop down box for routers. In the compatibility list it says Apple Airport Extreme base station is supported. All the other routers except the Apple router are listed. Am I missing something or is the Apple Airport Extreme base station not supported in EZ-Internet wizard? I am using DSM 4.2119.

[myCloud]

Download the Airport Utility 5.6 and set the Extreme up yourself. The 6.0 version is not for folks who have servers/NAS on their network.

[aimbie]

It turns out I was using the Airport Extreme in bridge mode connected to an Actiontec PK5000 modem I use to connect to CenturyLink DSL. I switched the PK5000 modem to "transparent bridge mode" and then setup the Airport Extreme to connect to the internet via PPPoE. When I ran the EZ Internet Wizard from DSM it recognized the Apple Airport and correctly set it up. As a side benefit my internet connection runs much quicker with the Airport acting as the router and not the PK5000.

[myCloud]

You might want to see what EZ Internet set in your Extreme.

[aimbie]

Even though EZ Internet wizard says it made the settings, when I check my Airport Extreme base station settings it does not show any port forwarding as having been setup. I cannot remotely access my DiskStation over the internet. Does anyone know how I set the correct port settings on the Airport Extreme base station. I would appreciate any instruction how to port forward on this type of router. It appears that under Internet on the NAT tap there is an option to Configure Port Mappings. When I click on that it request you to choose a service and then set Public UDP Port(s), etc. I don't understand which service to set or how to set it up. Thanks in advance.

[myCloud]

The "Service" is just there for convenience. For example, if you chose Personal Web Sharing, it forwards port 80 TCP to port 80 TCP. You don't need to choose a service. We won't in these instructions.

But let's first go back to the Internet -> DHCP setting. If you haven't already made it fixed to an IP outside the pool, let's establish a DHCP Reservation for your DiskStation within the range of the pool, . Note the Extreme itself uses 192.168.1.1 so the range starts at .2 and runs through 200. If you configured the DiskStation for a fixed IP within the pool, just reserve it here. Same if you left the DiskStation set for DHCP--choose an IP within the pool for it here. You can base the IP on MAC address. Hint: don't choose an IP that's already in use by a Mac or PC.

Now that we know for sure the IP of the DiskStation, we can go back to Advanced -> Port Mapping, and do port forwarding. Click + to create one for each port you need forwarded to the DSM. Here are the ports with suggested "Description." Don't forget to correct the default IP address in each one to the one for the DiskStation. Here are some basics. The rest are here. Use TCP and leave UDP blank.

5000 DSM (management console and Audio Station)
5001 DSM HTTPS (management console and Audio Station)
5005 WebDAV (to support the DS file app or CalDAV)
5006 WebDAV HTTPS (to support the DS file app or CalDAV)
5007 Alternate (if you set this up for Web Service and PhotoStation)
7000 Files HTTP (for File Station)
7001 Files HTTPS (for File Station)
22 SSH (hint forward 22022 to port 22 and avoid having brute force attacks that eat up bandwidth)
80 HTTP (for Web Station and PhotoStation)
443 HTTPS (for Web Station and PhotoStation)

For security when accessing your DiskStation over unsecured wireless networks, you may choose to only open the HTTPS version of these ports, or you may, where possible, leave both open and redirect the HTTP to HTTPS in the DiskStation. You may also choose to forward none of these and set up a VPN on the appropriate port. You can always go back and disable any port forward you set up by unchecking it.

This is a wonderful router and fairly easy to use. Don't be surprised when it takes up to a minute or more to "Update" the settings. Let me know if you need more help.

[aimbie]

I found a link to a Synology article on setting up an Airport Extreme. I followed the instruction and setup the Personal Web Sharing service by using the address for the DiskStation and I can now access it from the internet. The Airport doesn't allow you to setup port forwarding without selecting a service. I don't know if you can configure any of the other ports you suggested when using a service listed in the Airport Extreme dropdown box. Thanks for you help.

[myCloud]

The Airport doesn't allow you to setup port forwarding without selecting a service.

Yes, it does. That's how I did all mine, and I just did a test one to double-check it.

If you initially select a service, your only option is to select another service. Click Cancel and start all over, not selecting a service this time.

[aimbie]

Okay, I got it. So I still don't quite understand the TCP port options. To port forward what do I put in the Public TCP Port and Private TCP Ports? if I want to setup Port forward for 5000 or 5001, for example, do I enter those ports numbers in the Public and Private TCP Ports field? Thanks again for all your help. I may get eventually.

[myCloud]

Okay, I got it. So I still don't quite understand the TCP port options. To port forward what do I put in the Public TCP Port and Private TCP Ports? if I want to setup Port forward for 5000 or 5001, for example, do I enter those ports numbers in the Public and Private TCP Ports field? Thanks again for all your help. I may get eventually.

In one port forward configuration, forward Public Port 5000 to Private Port 5000 at the IP address of your DiskStation, give it a description of DSM HTTP, and save that.

In the next port forward configuration, forward Public Port 5001 to Private Port 5001 at the IP address of your DiskStation, give it a description of DSM HTTPS, and save that.

And so on.

Because the SSH port (22) is often hammered by brute force username/password guessing attempts, I leave the Private Port set on 22, but set the public port to a high numbered one not commonly scanned, i.e. 22022. You just have to remember when SSHing to your DiskStation from outside your network to configure SSH to go to port 22022 rather than just 22.

I also do this for my Macs that have Remote Login enabled, using other high ports (i.e. 22023, 22024, etc), each forwarded to private port 22 on it's own Mac. Even if you don't use command line Unix on your Macs, you may want to use "Screens VNC" on your iPad, which can automatically determine whether to use your Mac's private IP address on the local network or SSH off it.

[aimbie]

Okay, I think I have it now. Thanks for all your help.