Which configuration for a modem/router with a Netgear R7000

[tarassippo]

I am on ADSL using my own modem/router with a Netgear R7000 and all it's working fine, no double-NAT issues so far, but I'd like to understand whether, in terms of security and/or speed, it would be better to set up the R7000 in access point mode as it seems that having also the firewall in the R7000 (plus the one integrated in the modem/router) would bring no security benefits.

Is it true? And if yes, why two layers of protection are no better than one?

Another option would be to connect the R7000 to the DMZ of the modem/router and in this case I must enable the R7000 firewall, so my question would be: which pros and cons between those two possible options:

1) modem/router + R7000 as AP

2) modem/router + R7000 as router connected to the modem/router DMZ

Many thanks.

 

[Trikein]

Much of it depends on your ISP and the ability to configure the modem/gateway. Who is the ISP and what model modem do you have? I think you mentioned a DSL-AC68U before?

In general, you want the modem just performing the aDSL RJ11/RJ45 bridge and have your router doing the PPP authentication for your username/password. Also, you want to make sure that bridge is set to always stay on, and not time out during inactivity. Last, there are some MTU and other tweaks you can make to the router depending on the modem/gateway.

 

[tarassippo]

My modem/router is a ZyXEL VMG1312-B10A and the ISP is Sky. Long story short, after more than a week, I couldn't make the modem (bridge mode) working with the R7000, hence I decided to use the ZyXEL as modem/router.

My point is really to understand pros and cons of the mentioned options.

Thanks.

 

[Trikein]

Did you want to discuss/troubleshoot why bridge mode didn't work? It appears to be a option on page 15 of the manual. Did Sky push custom firmware to it that broke bridge? Was it difficult setting up the PPP settings in the Netgear router?

 

[tarassippo]

The ZyXEL is my own router, not the one Sky provided and yes I read the manual and it's not really complicated (and as I said, it works fine in router mode)...

As for the R7000 (I tried with both the stock firmware and DD-WRT), no so many options, PPPOE / user & password / IP from ISP / MAC spoofing and off you go... BUT had no luck, my R7000 doesn't connect this way...

Of course, any suggestion is more than welcome.

 

[Trikein]

Before you set any settings on the R7000 the ZyXEL device has to be set to bridge mode to bridge the PPPoE between the Netgear router and Sky. Sky are infamous for making this hard because they want you to use their equipment(more $?). Before you try to get the Netgear router to work, can you get a bridge between the ZyXEL gateway and a PC using a PPPoE PC client? If not, then the problem becomes Sky blocking true bridge or requiring some proprietary configuration. If so, try duplicating the same settings to the router, power cycling everything, and look at the logs of your Netgear. Feel free to post them for review.