Posted: Tue Aug 09, 2022 15:06 Post subject: Change to Bridge mode? Do I have to re-do DDWRT?
For my large home network, I am using an ARRIS DG3450A modem/router that is not set to Bridge Mode. In the ARRIS DG3450A configuration panel, I have all the Ethernet ports disabled except the port that my DD-WRT v3.0-r49626 std (08/03/22) WRT32X is connected through. For ARRIS DG3450A, only the 5Ghz Wi-Fi is enabled and it does not broadcast. Only I know the password to the 5Ghz and only I know the password to the ARRIS configuration panel and the DDWRT interface. The ARRIS has a firewall option and it is active. DDWRT is the DHCP Server.
Whenever I first setup DDWRT (at least 2-3 years ago I think) I believe I just hooked things up and they worked. However,
I am now wondering if I should go back and place the ARRIS in Bridge mode, now that I know that's an option. Is there a security risk I being vulnerable to by not having the ARRIS in Bridge mode? Should I leave things alone since it all works great?
If I do change to Bridge mode, is there a way I can keep all the DD-WRT's static ip's that I manually assigned to all the devices on my network? _________________ Linksys WRT32X | DD-WRT v3.0-r51937 std (03/05/23) | macOS Ventura
Joined: 04 Aug 2018 Posts: 1447 Location: Appalachian mountains, USA
Posted: Wed Aug 10, 2022 22:46 Post subject:
Bridge mode in a modem/router basically turns it into just a modem. It shouldn't cause you any issues with dd-wrt or force you to change your setup. The dd-wrt firewall is designed to deal with this configuration. You normally don't need the extra firewall in the unbridged modem/router. Just be sure the dd-wrt firewall is on (GUI>Security>Firewall, SPI Firewall ON). I'm not certain what the default settings are for the rest of that page, but I'm sure they are well thought out and reasonable. _________________ 2x Netgear XR500 and 3x Linksys WRT1900ACSv2 on 53544: VLANs, VAPs, NAS, station mode, OpenVPN client (AirVPN), wireguard server (AirVPN port forward) and clients (AzireVPN, AirVPN, private), 3 DNSCrypt providers via VPN.
Thanks for your reply! I will keep things as they are and follow your advice. _________________ Linksys WRT32X | DD-WRT v3.0-r51937 std (03/05/23) | macOS Ventura