On Thu, 15 Mar 2018, David Wright wrote: > On Thu 15 Mar 2018 at 10:18:20 (-0700), Don Armstrong wrote: > > 1: I suppose there might be some network hardware which doesn't > > support actual bridging of wired interfaces, but I've yet to see > > such an example. > > I think the router I've been using for the last few years is one.
The software might not support it, but if openwrt or ddwrt can run on the hardware, they should support bridging. > Required topology: > > ╲│╱ ╲│╱ ╲│╱ > ┌───────┐ ┌───────┐ ┌───────┐ > │W L╞ CAT5 │W L╞═PC │ ROKUs │ > [Modem]══╡A A╞═════════════╡A A╞ │ etc │ > │N N╞ │N N╞ └───────┘ > │ ╞═PC │ ╞═PC > └───────┘ └───────┘ I suggest that you instead run the second router as a switch with an attached wireless AP instead, and if necessary, create additional wireless networks which both APs broadcast for visitors/DMZs, and additional VLANs/VPNs to do your DMZ/high security area. [You can also add additional wireless APs and/or switches if you need them, too.] Of course, you'll have to run openwrt or ddwrt to actually do this; most built-in router firmware doesn't let you do this, because otherwise you might not buy the more expensive "enterprise" kit. -- Don Armstrong https://www.donarmstrong.com No matter how many instances of white swans we may have observed, this does not justify the conclusion that all swans are white. -- Sir Karl Popper _Logic of Scientific Discovery_