Brief Hands-On Report--AirPort Extreme Base Station with 802.11n Firmware 7.1 Update

Apple released Firmware 7.1 update for the new AirPort Extreme 'n' Base Station. It is available automatically by simply opening AirPort Utility 5.1 (not 5.0) if connected to an AirPort Extreme 'n' Base Station or as a stand-alone file from this Apple Web page. According to the Read Me file,

This update includes general fixes, compatibility updates, and security improvements for the AirPort Extreme Base Station with 802.11n.

The details on the two security updates are:

CVE-ID: CVE-2007-1338--The default configuration of an AirPort Extreme Base Station with 802.11n allows incoming IPv6 connections. This may expose network services on hosts connected through an AirPort Extreme Base Station with 802.11n to remote attackers. This update addresses the issue by changing the default setting to limit inbound IPv6 traffic to the local network. This issue only affects AirPort Extreme Base Station with 802.11n, and not other versions of the Base Station.

CVE-ID: CVE-2007-0734--AirPort Disk is a feature of AirPort Extreme Base Station with 802.11n that allows the sharing of files from a USB hard drive connected to a compatible base station. Sharing options, including password protection, are available via the AirPort Disk Utility. An issue in the AirPort Disk feature allows users on the local network to view filenames (but not their contents) on a password-protected disk without providing a password. This update addresses the issue by performing additional validation on AirPort Disk access requests. This issue only affects AirPort Extreme Base Station with 802.11n, and not other versions of the Base Station.

Furthermore, Apple states that "[t]his update requires AirPort Utility 5.1. If you have AirPort Utility 5.0 installed, you can update to AirPort Utility 5.1 by installing AirPort Base Station Update 2007-001: AirPort Base Station Update 2007-001 for Mac."

Finally, Apple states that,

After installing this update and restarting your system, you should use the AirPort Utility to review the configuration of your wireless network as follows:

1. Open AirPort Utility
2. Select the AirPort Extreme Base Station with 802.11n* being configured
3. Click the "Advanced" icon
4. Click the "IPv6" tab

• If "Block incoming IPv6 connections" is checked (selected), then inbound IPv6 traffic is limited and no further action is needed.
  
• If "Block incoming IPv6 connections" is not checked (deselected), and unsolicited incoming IPv6 connections are not desired, then it should be enabled as follows:
  

1. Check "Block incoming IPv6 connections"
   
2. Click the "Update" button at the bottom of the window to save the changes.

Our experience

We easily updated the firmware on our Extreme 'n' Base Station to v7.1 using AirPort Utility 5.1 on our 15" MacBook Pro C2D connected wirelessly the Base Station. While launching AirPort Utility 5.1, a dialog box dropped down and we just followed its directions. That was very simple and we navigated to 'Advanced/IPv6' and checked 'Block incoming IPv6 connections' per Apple's note above the security update.

When we clicked the 'Update' button, we were presented with an error dialog box stating that we either had to uncheck three 'Advertise configuration (printers/disks) globally using Bonjour' boxes or check the box and enter a wide-area hostname under 'Advanced/Bonjour'. Originally, we had to check those boxes to configure the AirPort Extreme 'n' Base Station or use attached devices with Macs using a different Base Station (Express or Extreme 'g') on our network. We unchecked the global Bonjour boxes anyway and restarted. We got a solid green light on the Extreme 'n' and all appeared well.

So, we tried to configure the Extreme 'n' Base Station with our 12" PowerBook G4 connected to our network via another Base Station--we could and we could also see and use the Bonjour printer connected to the Extreme 'n' Base Station. Apparently, after firmware 7.1 the global Bonjour checkboxes are not needed to be checked. It would have been nice if Apple had included this in its note. [Bill Fox]