Hi, i would like some advice regarding this setup is it secure or is it possible to do something similar, but using just one router? I am trying to setup a Wired Guest Network for untrusted devices like italkbb, tvpad, etc. Currently, i have my main net-gear r7000 router using latest default fw and my 2ndary Linksys wrt54gs using ddrwrt latest fw. So, right now i have my modem (bridged) > R7000 using 192.168.1.1 > Linksys using 192.168.1.2, however it is using a different gateway 192.168.0.1 On my main router, will be my computer devices or ones that are trusted. Iphones/Surface etc will be connected to the wireless guest network on the R7000. On my linksys will be my wired untrusted devices like italkbb and tvpad, since they are using a different gateway, is my main network files safe using this setup? as i mentioned before as well, is it possible to do a similar setup using just one router instead of two?
What's the IP of your Modem: 192.168.0.1?? Also, WHAT is the Modem you use: Brand, Type, Model, 1 or 4 Ethernet Port?
hmmm, i ain't sure what the ip of my modem is, but i have it bridged, so would it still have it's own ip? i just know that my r7000 is the main router and it starts of at 192.168.1.1 and it assigns the linksys 192.168.2, but i change it's gateway in the settings to use 192.168.0.1, etc. Also it is a rogers rocket advance modem i believe it is something like CGN3ACR or the newer one. It has 4 Ethernet ports.
"Something like ..." didn't helps in any means. If you looking for help, please post exact and true information! Your OP and the last post, simply showing that you either didn't have the real information of the system you're talking about (maybe isn't yours at all?), didn't have the knowledge needed for to handle the setup and config of a modem and router or didn't have needed access to the firmware's of those devices. Or something else! Fact is, with such info you gave, I couldn't help!
As fair as I can understand, yes being on two separate networks (assuming the netmask is 255.255.255.0) you should have already a good layer of separation. I'm just guessing, but I suppose your secondary router is connected tho the main one trough its WAN Ethernet port, and so the secondary router is doing NAT over the primary network. That said to be 100% safe the firewall is the answer. Which one depends on the real topology of the network.
Yes the netmask is 255.255.255.0 and as you said, my 2nd router is behind my first router both firewalls are on for each router and both of them are getting net access. To be exact this is the setup. Modem (Bridged) > R7000 > normal switch downstairs > linksys router connected to switch downstairs. (Both Routers have firewall enabled)