Catholic Education Ministries

Apple's AirPort is just one brand of wireless base station using the WiFi (802.11n) draft standard. Due to the popularity of the AirPort base stations in education, this tutorial focusses solely on AirPort-brand equipment.

Furthermore, this tutorial is specific to the newer 802.11n AirPort base station (2007-?). Another tutorial is available for the older 802.11g AirPort base station (2003-2006).

Security: Benefits of keeping WiFi networks secure...

• prevents nearby strangers from hogging internet bandwidth
• prevents nearby strangers from using internet inappropriately
• prevents nearby strangers from browsing networked equipment
• prevents nearby strangers from monitoring confidential data

Decide Network Details

Channel #'s

If your network has just a single base station, you can probably just set the channel to 'Automatic'.

However, if there will be multiple base stations in your school, set the channel number manually (channels 1-11). Each base station should use a separate channel and base stations in close proximity should have a channel difference of at least four.

Avoid using channels operated by immediate neighbors. Most neighboring networks can be identified using a widget such as JiWire WiFi Hotspot Finder.

Network Name

Assuming you want the ability to roam across your network seamlessly, all equipment should be configured with the same 'Network Name'. You can be creative with network names, avoiding terms that will cause passerbys to quickily identify the network as being associated with your school.

Base Station Names

Each physical base station should have a unique identifying name. Examples could be 'North top floor' or 'Main Office'.

Network Access Password

Before a computer accesses your network, the operater should prove permission to use your network by entering your network's access password. All equipment should be configured with the same access password, containing at least eight characters.

Base Station Administrative Password

The administrative password protects base stations from being reconfigured. For simplicity, use the same administrative password on each base station within a school, and only share that password with the other technology leaders of your school.

Access Controls

If using a limited number of wireless computers, additional security can be applied with Access Control. Access controls restrict your network to just the computers you specifiy.

To implement access controls, you'll need a list of all computers and their AirPort ID's (aka AirPort hardware address, aka AirPort Ethernet address). This is a 12-digit number with colon separators. Locate this number for each computer by . . .

1. Select 'About This Mac' from the Apple menu.
2. Click 'More Info...'
3. In the left column, select 'Network'.
4. In the list that appears, select 'AirPort' or 'Location' (varies).
5. Take note of the 'Ethernet Address' (aka AirPort ID) for the AirPort card.
6. Repeat these five steps for each wireless computer.

Time to Configure

1. Plug the base station into the network. Initially, it is best to use the WAN network jack, which is identified by a circular icon.
2. Plug the base station into an electrical outlet.
3. Launch AirPort Utility (not AirPort Admin Utility). If AirPort Utility is not in the Utilities folder, please install it using the CD that came with the base station.
4. In the left column, select the base station.
5. Click "Continue".
   
6. Enter the AirPort network's name. (Remember, all of the base stations will use the same name, assuming you want roaming capabilities.)
7. Enter the base station's name. (Remember, each base station gets a unique, identifying name.)
8. Click "Continue".
   
9. Select "WPA2 Personal".
10. Enter the desired password for accessing your network. (Remember, this is identical for all your base stations.)
11. Click "Continue".
    
12. Select "I connect to my local area network (LAN)".
13. Click "Continue".
    
14. If devices on your nework use static IP addresses, now is the time to enter that information.
15. Click "Continue".
    
16. Click "Continue".
    
17. Enter your desired administrative password for the base stations. (Remember, this is private to just you and other school technology leaders.)
18. Click "Continue".
    
19. Click "Update".
    
20. A congratulations screen will appear. However, now it's time for advanced settings.
21. In the "Base Station" menu, select "Manual Setup".
22. Click the "Wireless" tab.
23. Set the channel number (1-11), using the channel numbers previously identified. (Remember, each base station should use a different channel.)
    
24. If desiring access controls, follow these sub-steps.
    1. Click the "Access Control" tab.
    2. Set the MAC Addres Access Control to "Timed Access," even though time limitations will not be put in place.
    3. Click the PLUS symbol.
    4. Type the AirPort ID (aka AirPort Ethernet Address, aka AirPort Hardware Address) for one wireless computer.
    5. Type the name of that same wireless computer.
    6. Repeat the above three steps on each wireless computer.
       
25. In the toolbar, click the "Internet" icon.
26. Set Connection Sharing to "Off (Bridge Mode)".
27. Click "Update".
    

Warning: This process somehow missed the step of creating an unpublished SSID.

You are done with one base station. If configuring multiple base stations, please repeat all of these steps (starting with the heading Time to Configure above).

Adding Computers to the Wireless Network

Now that your wireless network is configured, each computer that will access the network wirelessly need configured.

1. Select System Preferences from the Apple menu.
2. Click Network.
3. Select AirPort from the Show menu.
4. Chose the option to "by default join" preferred networks or a specific network.
5. Enter the network name and access password.
6. Check Show AirPort status in menu bar.
   
7. Click the TCP/IP tab.
8. If devices on your network use static IP addresses, now is the time to enter that information.
9. Click the AppleTalk tab.
10. If your network requires AppleTalk (ie: old laser printers), check Make AppleTalk Active.
11. Click Apply Now.
12. Quit System Preferences.