Bridge between Wired and Wireless networks for a single device?

Question

---

EDIT 18/05/2011: Thanks for your answers, bridge mode IS the solution in most cases for this problem, but I can't use it because it breaks my web server. I am now looking at setting up a specific route as a solution and thats taken care of in a new question here: https://superuser.com/questions/285293/setting-up-a-route-between-wlan-and-lan-on-a-checkpoint-500w Please help if you can. Save my sanity!

---

(Please note, this question has been heavily edited!)

This was originally a question about getting iTunes Home Sharing to work - using the iPhone (or an iPad) as a remote to control iTunes on a desktop computer. The remote device, in this case an iPhone, is on a wireless network and the desktop PC is on a wired network.

Both wired and wireless networks are handled by a single device which is an all in one business-class firewall and router, a checkpoint safe@office 501w.

The problem was trying to pair 'remote' with 'iTunes' resulted in, well - nothing. No log entries, the software either side saying nothing about anything, just a complete blank.

I found a solution - described in the edit below - the device was throwing up a firewall to protect the wired network from the wireless one, which makes sense if you think about it - to get on my wired network you have to be in my house, so its a good chance I either know who you are or you're stealing my hardware anyway...

You can technically get on the wireless from outside, though you'd have to get around the mac address filtering which I hear is not actually impossible, so it makes sense to firewall the main wired network from that access.

I found 'bridge' mode and enabled it and it all worked straight away, but I quickly turned it off again - I don't want a full, perma-bridge between the wireless and wired if at all possible, I just want a bridge or route from the iPhone or iPad to the computer.

So thats now the question - not how to get it working, thats been solved - but how to get it working without potentially leaving a gaping network security hole?

EDIT 03/04/2011:

OK - It works, except I think I may have enabled it to work at a cost of some other security. I was looking around the firewall settings, specifically wireless network and had the option to either configure it in "Firewall Mode" or "Bridge Mode" - the explanation being:

To protect your wired LAN from being accessed by wireless users, select Firewall Mode. If you
prefer to grant full access from the wireless LAN to the LAN, bypassing firewall protection,
select Bridge Mode. 

I probably should have spotted this about 6 months ago... switching to bridge mode works. HOWEVER, I really would prefer not to allow broad access between Wifi and Wired, i'd rather just allow access between the two as needed... I do use mac address control and its unlikely that anyone who lives within range is a hacker hellbent on accessing my files, but i'd rather stick with good practice.

So the question should now be - how can I emulate this bridge mode ONLY FOR device(s) I specify?

Answer 1

Adding my own answer because sadly none of the ones here so far are near the mark. The solution was found to be setting up a bridge between wireless and wired networks on the same device, which are firewalled by default (to prevent someone getting on your wireless and accessing your devices).

For anyone in the same situation (based on firmware 8.0.36x) - login to your checkpoint admin panel and click:

• NETWORK
• MY NETWORK
• and then EDIT (next to WLAN/Wireless LAN).
• Select WIRELESS WIZARD and skip through to the 'Wireless Security' section of the resultant popup window, you will then be able to switch from FIREWALL MODE to BRIDGE MODE. Bridge mode allows wireless network devices to have full access rights to anything on your wired network.

So that works - but I really hope someone can come up with a better answer that doesn't involve a full network bridge. Surely better to be able to specifically punch a hole in your firewall for specific IP's or devices than to allow everything through - just in case someone gets on your wifi?

Answer 2

look here for windows firewall settings http://support.apple.com/kb/HT2553

also not knowing your router config and or capabilities i would look to make sure that there is an "any/any" kind of policy for going from WLAN to LAN and vice versa.

I hope this helps.

Answer 3

This may or may not be the case, but the last update I installed for iTunes broke Bonjour for Windows, it just wouldn't install, automatically or manually.

The way I understand it is that Bonjour helps Apple devices or services find eachother on the network, and without it, I haven't been able to use the Remote app either.

If this is the case, an update may rectify the situation (though it hasn't for me, it still won't successfully install)

Answer 4

The User Manual for your router specifies that the firewall does allow well-configured wireless devices to access the network. They should then have the same rights on the network as any other computer, wired or wireless.

Quoting from the section "Troubleshooting Wireless Connectivity" on page 199 :

I cannot connect to the WLAN from a wireless station. What should I do?

• Check that the SSID configured on the station matches the Safe@Office appliance's SSID. The SSID is case-sensitive.
• Check that the encryption settings configured on the station (encryption mode and keys) match the Safe@Office appliance's encryption settings.
• If MAC filtering is enabled, verify that the MAC address of all stations is listed in the Network Objects page (see Viewing and Deleting Network Objects on page 138).

Answer 5

Can you make rules that allow only the ports needed by Bonjour or the Remote app to access the LAN? Possibly limit access to this rule by MAC address? Not sure about the MAC address or not. Here is a list from Apple of used ports by their products.

http://support.apple.com/kb/ts1629