RT2600ac Should I buy it?

[wwwampy]

I think I'll order RT2600ac today. Don't worry, I'll get back for help to setting all up :P

 

[fredbert]

🏔...... ..........🖥

Ready!

 

[wwwampy]

Purchased!

Now I need to call my ISP to get me only a modem. I'll need to wait a few days for that

 

[fredbert]

[Haven't read back through the thread]

My ISP's router (Virgin Media 'Super' Hub 3 ... my quotes) is able to be setup in bridge or router modes, by me. The engineer was rather pleased I used it in bridge mode because it's less complicated for them to troubleshoot.

I never liked the idea of not be overall admin on my perimeter firewall.

 

[Rusty]

Purchased!

Now I need to call my ISP to get me only a modem. I'll need to wait a few days for that

Hmm with my provider is one phone call and 2min + a reboot to get their router into bridge configuration.

 

[Shadow]

Hmm with my provider is one phone call and 2min + a reboot to get their router into bridge configuration.

Same here. My ISP 'say' they don't even have modem-only devices.

NOTE: there are some ISP's in the Netherlands that don't even support having their modem/router in bridge mode... Yeah........ Good thing there are tricks to bypass that with VLAN's (which Syno routers don't support on the WAN port unfortutaly so had to place a managed switch between the Syno router and the MTU).

 

[wwwampy]

Hmm with my provider is one phone call and 2min + a reboot to get their router into bridge configuration.

My old ISP Ubee router does not support bridge mode. Actually, I'll call them again and check.

Is there any difference to have only modem or router in bridge mode?

 

[wwwampy]

Nope, no option for bridge mode. Thankfully I can get only modem. I hope it'll come on Friday, because my RT2600ac comes then

 

[fredbert]

Is there any difference to have only modem or router in bridge mode?

For me? The VM hub router has an admin interface (web) that I can login to and tell it to be in bridge mode or router/firewall/wifi mode. The modem is integrated for the WAN port, being a co-ax connection. So really your box is a modem that supports bridge and/or router modes towards the the customer devices.

In bridge mode you provide the router/firewall and it will have the Internet IP assigned to its external port (connected to ISP box). In router mode the ISP's box gets the Internet IP assigned to it.

 

[Daddo]

Same here. My ISP 'say' they don't even have modem-only devices.

NOTE: there are some ISP's in the Netherlands that don't even support having their modem/router in bridge mode... Yeah........ Good thing there are tricks to bypass that with VLAN's (which Syno routers don't support on the WAN port unfortutaly so had to place a managed switch between the Syno router and the MTU).

While implementing managed switches to your network is great since you can direct traffic to different devices and control bandwidth and stuff, there is always another option for those who do not want to spend money on hardware or their needs are more basic.

Since not all ISP routers can be put into bridge mode (when device is in bridge, connection is established by supplying credentials from another device, usually another router directly connected to that of the ISP - PPPoE on xDSL or PPPoA on cable), and not all ISP provide "modems", one can always direct all data from the WAN IP to the local IP of the router connected to the ISP provided device.

The option inside ISP router is called DMZ or Demilitarized zone host (explanation starts at 3:50 in the same video).

IMHO, best practice when implementing your own router as DMZ host behind ISP equipment is to set static IP address on the WAN IP of your own router (i.e. if the ISP router local IP is 192.168.0.1, set your router WAN IP to 192.168.0.X - where X can be up to 254, subnet mask is 255.255.255.0, default gateway is the same ISP router, while DNS servers can be those of OpenDNS or Google public DNS or whatever your ISP gave to you).

Since your other devices will be connected to your router, you should disable DHCP server service on ISP router through the web intefrace (check provided user manual or the sticker on the back of the device for proper credentials).

Make sure that the LAN IP address of your router is different from WAN IP address (i.e. if WAN is 192.168.0.254, local IP should be 192.168.1.X - go either to the top or bottom here - 1 or 254).

Enable DHCP server service on your router for that subnet (Berry talks pizza, which is like giant cookie ).

 

[Shadow]

The option inside ISP router is called DMZ or Demilitarized zone host (explanation starts at 3:50 in the same video).

Did I ask for an explanation about DMZ? On most ISP routers it still works like shit.
And when using site-to-site VPN, using the DMZ option is absolutely a no-go.

 

[Daddo]

Most ISP routers ARE shit. Thats why people get their own network equipment.

While you did not ask for an explanation, I did provide it as alternative "workaround" for OP's (OP here stands for original poster) ISP bridge problem. My apologies if me quoting you made you an OP (OP here stands for offended party).

 

[wwwampy]

OMG! It's here

Now I just need to wait for modem only... Hopefully today.

 

[WST16]

OMG! It's her

Yayyyy. We should celebrate this auspicious occasion with some cookies once you set it up.
Congratulations

 

[WST16]

Most ISP routers ARE shit.

True

 

[wwwampy]

No cookie... My ISP won't come today. So I need to wait at least till Tuesday.

At least the router looks good

 

[fredbert]

Things to know:

The eject button next to the side USB port ejects the back USB port at the same time. Not sure about the SD card slot as I’ve never used it. It will eject a disk even when selected for System database and Threat Prevention... best not use the eject button!

It feels like an age when it’s booting up esp. the first time but just let it do its thing. Take a cold shower if the excitement gets too much

Use Threat Prevention as you’ll be surprised what’s been happening. The default policy is good enough but you may want to de-tune the notifications/email alerts.

 

[wwwampy]

Thanks, I'll come back with questions if I won't understand something.

 

[Shadow]

The eject button next to the side USB port ejects the back USB port at the same time. Not sure about the SD card slot as I’ve never used it.

Ye it'll also eject the SD card and push it out.

 

[fredbert]

Ye it'll also eject the SD card and push it out.

Seems to me that this button's action should be configurable because you don't want to be ejecting the drive used by Threat Prevention. I'd suggest that 'all or nothing' is probably the least useful action.

Otherwise I really like the SRM devices