On Thu, 15 Mar 2018, David Wright wrote:
> On Thu 15 Mar 2018 at 10:18:20 (-0700), Don Armstrong wrote:
> > 1: I suppose there might be some network hardware which doesn't
> > support actual bridging of wired interfaces, but I've yet to see
> > such an example.
> 
> I think the router I've been using for the last few years is one.

The software might not support it, but if openwrt or ddwrt can run on
the hardware, they should support bridging.

> Required topology:
> 
>             ╲│╱                   ╲│╱                 ╲│╱
>          ┌───────┐             ┌───────┐           ┌───────┐
>          │W     L╞    CAT5     │W     L╞═PC        │ ROKUs │
> [Modem]══╡A     A╞═════════════╡A     A╞           │  etc  │
>          │N     N╞             │N     N╞           └───────┘
>          │       ╞═PC          │       ╞═PC
>          └───────┘             └───────┘

I suggest that you instead run the second router as a switch with an
attached wireless AP instead, and if necessary, create additional
wireless networks which both APs broadcast for visitors/DMZs, and
additional VLANs/VPNs to do your DMZ/high security area. [You can also
add additional wireless APs and/or switches if you need them, too.]

Of course, you'll have to run openwrt or ddwrt to actually do this; most
built-in router firmware doesn't let you do this, because otherwise you
might not buy the more expensive "enterprise" kit.

-- 
Don Armstrong                      https://www.donarmstrong.com

No matter how many instances of white swans we may have observed, this
does not justify the conclusion that all swans are white.
 -- Sir Karl Popper _Logic of Scientific Discovery_

Reply via email to