Secondary router?
Author
Discussion

RizzoTheRat

Original Poster:

29,063 posts

223 months

Tuesday 11th February 2020
quotequote all
I'm currently renting an apartment where the landlord provides the internet connection, with one Ethernet cable coming in to the apartment and wifi which is shared with the landlord and the upstairs apartment.
Obviously this isn't great from a security perspective, and the wifi reception is a bit patchy as the router is outside my apartment.

Can I connect something like this to the Ethernet connection I have to allow me to run a sub-network, with my PC and NAS on wired connections and my own wifi network?
https://www.amazon.co.uk/TP-Link-C7-Wireless-Suppo...

Will the fact I'm daisy chaining 2 routers cause problems with internet access? Also I won't have access to the first routers settings so don't know if that will be an issue.

If I can do such a thing, any recommendations or something with 4 or more Ethernet ports and wifi?

randlemarcus

13,646 posts

262 months

Tuesday 11th February 2020
quotequote all
Unifi USG, plus your own switch would do as a cheap wired network. Stops them poking around your network, though in theory, they could still see all your traffic as it flows through their router. eBay might throw some bargains up.

New, something like a UDM would do perfectly, if you can find one. Firewall, switch and AP. You'll always have a suspicion of the router belongs to someone else though.

robbieduncan

1,993 posts

267 months

Tuesday 11th February 2020
quotequote all
Double-NAT is generally considered to be a bad thing

FukeLreeman

1,502 posts

206 months

Tuesday 11th February 2020
quotequote all
You could have something like an Apple airport extreme with DHCP switched off, so address's are given by landlords router.

That can be used to then create a secure wifi network.

I have a Vodafone router/modem with wifi switched off, handlding DHCP, and 3 airport extremes plugged in handling wifi network, around the house.

RizzoTheRat

Original Poster:

29,063 posts

223 months

Tuesday 11th February 2020
quotequote all
randlemarcus said:
Unifi USG, plus your own switch would do as a cheap wired network. Stops them poking around your network, though in theory, they could still see all your traffic as it flows through their router. eBay might throw some bargains up.

New, something like a UDM would do perfectly, if you can find one. Firewall, switch and AP. You'll always have a suspicion of the router belongs to someone else though.
Unifi Dream Machine?



robbieduncan said:
Double-NAT is generally considered to be a bad thing
Does that mean that my router would have an IP address and it would assign all devices their own IP address but everything goes though the routers IP?

If I used my router as a switch, ie don't use the WAN connection, is this still an issue? Presumably that wouldn't give me any security benefit though? Is this Luke's DHCP switched off option?

robbieduncan

1,993 posts

267 months

Tuesday 11th February 2020
quotequote all
RizzoTheRat said:
Does that mean that my router would have an IP address and it would assign all devices their own IP address but everything goes though the routers IP?

If I used my router as a switch, ie don't use the WAN connection, is this still an issue? Presumably that wouldn't give me any security benefit though? Is this Luke's DHCP switched off option?
If you want a separated network (so others can't see what's happening on your network/see your devices) you need either a separate IP range and a router that routes between the two networks. This can then prevent "scans" from coming into your network. As we are not dealing with full public IP ranges this means NAT. So you have 1 public IP address and a way of mapping to multiple internal IP addresses. This is how almost all home networks in the UK work. If you then have a second internal network behind another router you have double NAT and this breaks some services

Luke's option as you say means you are on the IP address range of the full network you are currently on. You could stick firewall in between and configure it correctly to stop scans/access from the rest of the network to yours. This is semi-complicated!

If you are just wanting more network ports and better wifi a switch and a WAP without any sort of router would work just fine.

RizzoTheRat

Original Poster:

29,063 posts

223 months

Tuesday 11th February 2020
quotequote all
Hmm, looks like Double NAT can cause issues with things like SSL and VPNs so that doesn't look ideal.

A secondary device as a switch and wireless access point would give me additional Ethernet ports, better wireless, but no added security. I think this is probably the way forward then. If I connect a router by its LAN ports rather than it's WAN port will that automatically mean the landlords router assigns addresses rather than my device doing it?

robbieduncan

1,993 posts

267 months

Tuesday 11th February 2020
quotequote all
RizzoTheRat said:
If I connect a router by its LAN ports rather than it's WAN port will that automatically mean the landlords router assigns addresses rather than my device doing it?
No. You will need to turn off DHCP/put the router in bridge mode

RizzoTheRat

Original Poster:

29,063 posts

223 months

Tuesday 11th February 2020
quotequote all
Cheers. So should I connect via the WAN port or LAN port? Would the WAN port mean it's still doing some kind of firewall between the landlords router and my network?

Sorry for the dumb questions, I've not used my own router since my trusty old WR54g in the days before Virgin routers included wifi.

robbieduncan

1,993 posts

267 months

Tuesday 11th February 2020
quotequote all
Probably depends on the router. It may be that it supports a transparent bridge mode with firewall

geeks

11,821 posts

170 months

Tuesday 11th February 2020
quotequote all
Whats the 4G coverage like where you are? Could just setup your own stuff with a 4G router with a decent contract (I have a 3 one that gives 20GB a month with Go Binge (free Netflix and a few other bits for about £5 pcm)

RizzoTheRat

Original Poster:

29,063 posts

223 months

Sunday 15th March 2020
quotequote all
Finally got round to sorting this out. Realised I also wanted a couple of wired connections by the telly for the PS3 and Pi, so decided I either needed a wireless bridge or powerline system.

Ended up getting a Linksys Deco P9 triple pack, each one comes with two gigabit Ethernet ports as well as the mesh wifi and powerline between them. Impressed so far, the old wifi peaked at about 25 Mbps and I completely lost connection in some parts of the house. Slowest wifi I've measured anywhere so far on this system is over 100 Mbps (the wired connection is about 120).

Currently running in the default Router mode, so presumably double NATing, but not causing any issues so far, easy enough to switch to Access Point mode if needed, but I'm wondering if it's intelligent enough to have automatically realised there's a router upstream of it.

geeks

11,821 posts

170 months

Sunday 15th March 2020
quotequote all
I have the Deco M4 kit, it's very good especially for the price (on offer from Amazon for £98 for three repeaters they also have the 2 x giglan ports), nice choice!