Configuration Advice

[scoaste]

To preface, my networking knowledge is a bit limited. What I initially wanted to do was just change my DNS to use Adguard to filter out streaming service(s) ads. But then I started diving into my network setup and it opened another can of worms. What I have are two routers: one is a Technicolor C2000t required to connect to my ISP. The second is an ASUS RT-AC68U which I already owned prior to switching to this ISP, to which all clients are connecting. Everything works now but I suspect that I have more services enabled on both routers than I really need. What I would like to do is use the ASUS as both a hardwired (PC) and Wi-Fi (mobile, etc.) device access point (assuming that's the correct terminology) that also supports VPN clients on those devices (not configuring VPN on the router(s) per se). The C200t would be just the Internet on-ramp -- no wireless enabled. What I'm needing help with is what is a recommended minimal, secure way to configure these? I.e WAN, LAN, firewall, NAT, DHCP, WPA2, IP addresses / ranges, DNS, DMZ, etc. I know, I'm asking a lot.

 

[ColinTaylor]

You can change Asus' Operation Mode to Access Point. It then becomes a fairly dumb device with no routing capabilities. So no VPN, no AiProtection, no DNS, no DHCP, etc. Your C2000t would then carry on just as before providing the heavy lifting.

 

[scoaste]

Thanks, Colin. I applied that and verified that I have Internet access still from all devices. However now I cannot get to the ASUS login page anymore via either domain name or IP. My PC is hardwired directly to the router.

 

[ColinTaylor]

Use the ASUS Device Discovery utility or look in the logs of the C2000t to determine the Asus' new IP address.

[ASUS Device Discovery] How to find the IP address of your wireless router or AP from Windows system? | Official Support | ASUS USA

 

[scoaste]

I saw that page, however it doesn't help with my Linux system. I tried "arp -a" and "ifconfig -a" but nothing reveals.

 

[ColinTaylor]

Doesn't the C2000t have some logs that show the IP addresses of DHCP clients (which the Asus will be if you didn't configure it with a static address)?

 

[scoaste]

Not in logs, but found it in the C2000t device table...