Manage AirPort port mapping and Wi-Fi login

The Server app can manage an AirPort device to give Internet computers access to selected services, and to let users log in to your wireless network with their name and password. The Server app can manage an AirPort Extreme Base Station (802.11n) or a Time Capsule.

To be managed, your AirPort device must have its router mode set to “DHCP and NAT.” The “default host” option should also be turned off. The advanced Internet option IPv6 Mode must be set to Automatically and Tunnel.

If you don’t use the Server app to manage your router, you can use the router’s configuration software to protect your server and your intranet. For more information, see Router port mapping.

Add or remove public services

You can use the Server app to designate public services that can be accessed by computers on the Internet. OS X Server configures your AirPort device to expose those public services on the Internet.

The process of exposing individual services to the Internet is called port mapping or port forwarding. For more information, see Port mapping for network and server protection.

Select your AirPort device in the Server app sidebar.
To expose a service to computers on the Internet, click Add , then click the pop-up menu, then choose the service from the pop-up menu.
If the service you want to add isn’t listed in the pop-up menu, choose Other, then enter the service name and port. For a list of services, see Services and ports.
Note: Exposing Websites service also exposes Wiki, web calendar, and Profile Manager services.
To stop a listed service from accepting connections initiated by computers on the Internet, select the service, then click Remove .
To apply your changes, click Restart AirPort. If asked, enter the password for your AirPort device.
Important: Restarting your AirPort device interrupts its services for all computers on your intranet for up to a minute. AirPort device services may include Internet access, DHCP service, and a shared disk for Time Machine backup or other uses.
When entering the password to authorize restarting the AirPort device, use the password for the device, not the password for your Wi-Fi network. OS X Server remembers this password, so you don’t have to enter it again unless you change it on your AirPort device.

Services that aren’t in the Public Services list can get incoming connections only from the server’s intranet.

Allow user name and password login over Wi-Fi

You can let users log in to your wireless network with their user name and password instead of the Wi-Fi network password.

In this case, your server provides Remote Authentication Dial In User Service (RADIUS) for your AirPort device and authorizes all user accounts on the server to access your wireless network. For more information, see About RADIUS for AirPort.

Select your AirPort device in the Server app sidebar.
If you want users to log in to your wireless network with their user account credentials, select “Allow user name and password login over Wi-Fi.”
Important: Your server will lose its connection to the AirPort device, unless the two are connected by a wired Ethernet network.
Don’t select this option if you want to let users log in to your wireless network with the Wi-Fi network password.
You can turn off RADIUS using the AirPort Utility app.
To apply your changes, restart your AirPort device by entering its password and clicking Set.
When entering the password to authorize restarting the AirPort device, use the password for the device, not the password for your Wi-Fi network. OS X Server remembers this password, so you don’t have to enter it again unless you change it on your AirPort device.
Important: Restarting your AirPort device interrupts its services for all computers on your intranet for up to a minute. AirPort device services may include Internet access, DHCP service, and a shared disk for Time Machine backup or other uses.

Selecting this option starts RADIUS on your server, registers the selected AirPort device with RADIUS, and authorizes all user accounts on the server to access your wireless network.