<html><head></head><body><div>On Thu, 2018-08-30 at 21:17 -0500, o1bigtenor wrote:</div><blockquote type="cite"><pre>On Thu, Aug 30, 2018 at 5:16 PM, r hayman <<a href="mailto:rhayman@pureice.com">rhayman@pureice.com</a>> wrote:
<blockquote type="cite">
Like Ioannis, I control my own LAN and isolate it from the "LAN" of the
ISP-provided device.
I currently have an Ubiquity EdgeRouter and its WAN port is the only thing
connected to the ISP-provided device.
I set the ISP-provided device into bridge mode (if I can't I have my ISP do
it).
When this is complete, my EdgeRouter WAN directly faces the Internet (gets
an Internet routable address).
I have the EdgeRouter set up as a DHCP server on the LAN side and have all
incoming and outgoing routes denied by default.
I add rules to allow only what I want in and out of my network.
I also have the ability to support VLANs for IoT devices that I don't want
on my LAN - they get a separate VLAN
Set up like this, my entire LAN operates within the LAN even when the ISP or
the WAN goes dark.
</blockquote>
This sounds like what I'm looking for.
So - - - am I understanding correctly?
You have 2 routers with one serving as a connection to the WAN and the second
is the one that connects from the WAN to itself and #2 runs the LAN.
Any ideas on documentation to 'make' this happen?
I'm new to any sys admin/computer under the hood stuff so its useful for me to
find a crib sheet where things are laid out.
Thanking you for your idea/s !!!
Regards
Dee
_______________________________________________
TCLUG Mailing List - Minneapolis/St. Paul, Minnesota
<a href="mailto:tclug-list@mn-linux.org">tclug-list@mn-linux.org</a>
<a href="http://mailman.mn-linux.org/mailman/listinfo/tclug-list
">http://mailman.mn-linux.org/mailman/listinfo/tclug-list
</a></pre></blockquote><div><br></div><div><br></div><div>Internet --- Comcast Modem (bridge mode) --- My EdgeRouter --- My LAN</div><div><br></div><div>Read this wonderful guide for how to do this with an Ubiquity EdgeRouter <a href="https://www.grc.com/sn/files/ubiquiti_home_network.pdf">https://www.grc.com/sn/files/ubiquiti_home_network.pdf</a></div><div><br></div><div>Obviously this may be more complex of a network than you need, but you can eliminate the VLANs you don't need.</div><div><br></div><div>My setup is a subset of what the diagram on page 3 shows. The primary reason I have the cable modem in bridge mode is so that I can VPN into my EdgeRouter if I need to. If you set up your cable modem up in bridge mode then whatever is next in-line is a device on the Internet, so make sure it is secure before opening up the cable modem in bridge modem - i.e. my EdgeRouter sits directly on the Internet because of setting the cable modem up in bridge mode.</div><div><br></div></body></html>