subnet of home LAN - did I overlook anything important?

[gretter]

Network / LAN​

For hobby purpose, a web-server is run at home. To improve security the web-server is on a subnet seperate from pc’s and phones.

In the future IOT devices will be added to the guest wifi.

Subnet LAN into 192.168.50.0/24 and 192.168.100.0/24​

Two routers: Router_A and router_B.

Router_A:​

Router_A is gateway to internet.

LAN IP: 192.168.50.1/24

LAN - DHCP Server: Manually assign IP 192.168.50.200 for router_B.

Physically connect the routers. LAN port of router_A to WAN port of router_B.

Router_B:​

LAN IP: 192.168.100.1/24



Later I’ll add NAT on router_A for the web server.

The setup appears to work fine, but perhaps I've got some lesson to learn, that I didn't think about.

 

[ColinTaylor]

If you want to completely isolate Router A's subnet from Router B's LAN devices you could block access to 192.168.50.0/24 on router B's firewall. Router B's LAN devices would still have access to the internet.

 

[gretter]

Thank you, I've checked right a way.
As far as I can tell, the router firewall, doesn't require blocking rules. I think it's blocks all on default.
There is no Merlin Wrt for this model.

 

[ColinTaylor]

You didn't say what routers you were using so I was speaking in general terms.

If Router B is an Asus router you can use its Network Services Filter to block access to the upstream 192.168.50.0/24 network.

 

[gretter]

Perfect. Case closed