Reply to thread

Message

<blockquote data-quote="Lenny_Fox" data-source="post: 936426" data-attributes="member: 82776">Apply all best practices of router hardening (there is a guide on this forum also)Most important (IMO) are to1. Install latest patches of the&nbsp; router firmware (and all devices when possible)2. Enable all build-in security fetures3. Use the longest pass phrase possible for your home networkLimit exposure of (and access to) your guest network (on which you host the weak devices)1. Reduce the lease time of connected devices of your guest network to say 6&nbsp; hours2. Reduce the number of IP&#039;s which are available for DHCP/device allocation on your guest network (when you only have three devices reduce it 5 maximum)3. Reduce the &quot;up time&quot; or &quot;internet connection time&quot;&quot; by assigning a parental control schedule to the devices on the guest network for the hours you use themWhen you use two routers:1. Allocate a different range of IP-addresses in each router.2. Block the IP-addresses of the router with the weak devices on the guest network from the other router on your home network3. Search for network partitioning feature on the router with the weak devices and enable this (this will prevent clients in the network to communicate with each other)Before getting my latest tri-band router I had an old 2.4 Ghz router which I used for IOT devices and phones. I disabled the 2.4 Ghz network on the modem/router of my ISP and only used the 5GHZ frequency of my ISP-router. You don&#039;t need to bridge the router, just plug old 2.4 Ghz router into the first network cable port of your ISP-router and you have two different network names on two different routers on two different frequencies. It is a cheap way to create a dual cpu/dual band solution with two relatively low range routers.This won&#039;t prevent a hacker to get in, but makes it harder for script kiddies to sniff your network and find the pass phrase to access network and/or router.</blockquote>

[QUOTE="Lenny_Fox, post: 936426, member: 82776"] Apply all best practices of router hardening (there is a guide on this forum also) Most important (IMO) are to 1. Install latest patches of the router firmware (and all devices when possible) 2. Enable all build-in security fetures 3. Use the longest pass phrase possible for your home network Limit exposure of (and access to) your guest network (on which you host the weak devices) 1. Reduce the lease time of connected devices of your guest network to say 6 hours 2. Reduce the number of IP's which are available for DHCP/device allocation on your guest network (when you only have three devices reduce it 5 maximum) 3. Reduce the "up time" or "internet connection time"" by assigning a parental control schedule to the devices on the guest network for the hours you use them When you use two routers: 1. Allocate a different range of IP-addresses in each router. 2. Block the IP-addresses of the router with the weak devices on the guest network from the other router on your home network 3. Search for network partitioning feature on the router with the weak devices and enable this (this will prevent clients in the network to communicate with each other) Before getting my latest tri-band router I had an old 2.4 Ghz router which I used for IOT devices and phones. I disabled the 2.4 Ghz network on the modem/router of my ISP and only used the 5GHZ frequency of my ISP-router. You don't need to bridge the router, just plug old 2.4 Ghz router into the first network cable port of your ISP-router and you have two different network names on two different routers on two different frequencies. It is a cheap way to create a dual cpu/dual band solution with two relatively low range routers. This won't prevent a hacker to get in, but makes it harder for script kiddies to sniff your network and find the pass phrase to access network and/or router. [/QUOTE]

Verification