Linksys WRT54G Wireless-G Router: Behind or in Front of Wired Router?

[DealMonkey]

Okay, I have a Linksys WRT54G Wireless-G Router on its way right now. Before it gets here, I want to figure out the most secure way to integrate this puppy into my home network.

Currently I have this: DSL Modem ----> Linksys BEFSR41 ----> 3 PCs

When I get the wireless router, I have a few options as to where I place it. What I'm after is the best security -- I don't want wardriving phreaks to get access to my LAN. Of course, I will be locking down the new Wireless-G router as best as I can, but can you guys tell me which would be the best setup for security and why?

A.) DSL Modem ----> Wireless-G Router ---- (uplink) ---> Wired Router -----> 3 PCs

B.) DSL Modem ----> Wired Router ---- (uplink) ----> Wireless-G Router ----> 3 PCs

C.) DSL Modem ----> Dumb Hub (splits)

• C1.) ----> Wired Router ---> 3 PCs

• C2.) ----> Wireless-G Router ----> Wireless devices

And finally, what would be the implications (security-wise) if I just scrapped the wired router and used only the new Wireless-G Router?

D.) DSL Modem ----> Wireless-G Router ----> 3 PCs

TIA

 

[JackMDS]

You can not use two Routers as Routers.

One can be used as Router the other as a switch, or the Wireless as a switch with an Access Point.

Use as a Router the one that has more flexible Firewall.

Link to: Using a Wireless Cable/DSL Router as a Switch with an Access Point

 

[DealMonkey]

Good point, although in theory shouldn't I be able to split my DSL and plug in both routers? Both would obtain distinct IPs from my ISP and serve different LANs (i.e. one for wired PCs and the other for wireless devices). I guess it would require a dumb hub with two uplink ports or something ...

Anyhow, it sounds like you're suggesting I just run the single router (i.e. the Wireless-G router), Option "D." Although this seems like it would introduce new security issues to my LAN as anyone who could connect wirelessly (by hacking in) would thereby have access to my wired PCs. Is this a big deal? Or am I over-reacting?

Obviously I would lock down the wireless aspect as much as possible. Enable WEP, change SSID, enable MAC address authentication, etc., etc. And obviously, the built-in firewall would protect my LAN from attacks over the DSL connection. But, if some wardriving hacker DID manage to bypass the wireless security and connect, would they have access to the LAN?

 

[JackMDS]

Originally posted by: DealMonkey
Good point, although in theory shouldn't I be able to split my DSL and plug in both routers? Both would obtain distinct IPs from my ISP and serve different LANs.

Sorry this is not So.

Technology wise.

While on a Cable Interent line (with ISP approval) you can put two Modems. It is Not Possible to put more than one Consumer DSL connection on one regular Tel. line

But, if some wardriving hacker DID manage to bypass the wireless security and connect, would they have access to the LAN?

Yeah, and similarly our home can be compromise. Our car can be stolen etc.

So back to the Caves Humans.

OH NO there is Wild Bears in the Caves. :Q:frown::evil::brokenheart::beer::wine:

 

[MikeDub83]

I'm pretty sure he'll be able to do this. We'll call it option E.

E.) DSL Modem ----> Wireless-G Router -------> Hub (or switch) -----> Wired Router -----> Hub (or switch) -----> 3 PCs

 

[DealMonkey]

Originally posted by: MikeDub83
I'm pretty sure he'll be able to do this. We'll call it option E.

E.) DSL Modem ----> Wireless-G Router -------> Hub (or switch) -----> Wired Router -----> Hub (or switch) -----> 3 PCs

Why use the "Hub (or switch)" between the routers? Couldn't you just use the "uplink" port on the Wireless G Router to connect the Wired Router? I thought that was the whole point of the uplink port -- to expand your network with other routers, switches and hubs?

 

[MasterofNone]

Cable Modem ----> Wired Router-----> Wireless-G Access Point ----> 2 PCs
____________________l-----> 2 PCs
This is the way I have mine. Where I live I'm not worried about anyone getting in through the wireless. DCHP is provided by the wired router, it is turned off in the wireless AP.

 

[MikeDub83]

Originally posted by: DealMonkey

Originally posted by: MikeDub83
I'm pretty sure he'll be able to do this. We'll call it option E.

E.) DSL Modem ----> Wireless-G Router -------> Hub (or switch) -----> Wired Router -----> Hub (or switch) -----> 3 PCs

Why use the "Hub (or switch)" between the routers? Couldn't you just use the "uplink" port on the Wireless G Router to connect the Wired Router? I thought that was the whole point of the uplink port -- to expand your network with other routers, switches and hubs?

Yeah, he probably could. He might need a cross over cable. Not sure about that one.

 

[RhythmAddict]

He could definitely do this...

INet > Wired Router > Crossover to LAN port on Wireless Router > Wireless router

The gateway on the Wireless router should be the wired routers address. The clients coming off the wireless router should have the gateway of the wired router, not the wireless router.

I know this works, 'cause I'm doing it on my home network.

Hope that helped

 

[DealMonkey]

Originally posted by: RhythmAddict
He could definitely do this...

INet > Wired Router > Crossover to LAN port on Wireless Router > Wireless router

The gateway on the Wireless router should be the wired routers address. The clients coming off the wireless router should have the gateway of the wired router, not the wireless router.

I know this works, 'cause I'm doing it on my home network.

Hope that helped

RA. Cool, that's the solution I'm looking for. My only questions are: (1) Did you disable DHCP on the Wireless Router? If so, how do you know what IP to use for accessing the wireless router's admin panel? If you did disable DHCP, how do the wireless devices get their IP?

 

[RhythmAddict]

Originally posted by: DealMonkey

Originally posted by: RhythmAddict
He could definitely do this...

INet > Wired Router > Crossover to LAN port on Wireless Router > Wireless router

The gateway on the Wireless router should be the wired routers address. The clients coming off the wireless router should have the gateway of the wired router, not the wireless router.

I know this works, 'cause I'm doing it on my home network.

Hope that helped

RA. Cool, that's the solution I'm looking for. My only questions are: (1) Did you disable DHCP on the Wireless Router? If so, how do you know what IP to use for accessing the wireless router's admin panel? If you did disable DHCP, how do the wireless devices get their IP?

Yes sir, I disabled DHCP on the wireless router. You can access the wireless router because you set the LAN IP address of the router first - this is independent of DHCP. With DHCP disabled, you have to statically set the IP addresses on the wireless clients. You can set the range of assignable IP addresses in the router control panel - so if you set the range to be from 192.168.1.100 - 192.168.1.105 > that will give you 100 - 105 of assignable IP's for clients. Let me know if you have any further questions...

btw...I'm doing this with a D-link 614+ right now...

 

[abc]

reading this made me a bit dizzy. why are you setting this up this way?