My ISP has been accessing my router, (to fix or update something). The ISP’s router is GigaHub 823G-2 (FTTH conection) and my router is a TP-Link TPTD-W8968. They accidentally changed my SSID and thanks to that I realize the following:
- I have no control over the device, no telnet, some fixed values, etc.
- If I need to restore from factory, I would need to call them.
- Passwords are unencrypted.
- I feel my own devices, connected to this router, potentially vulnerable.
I found this question very relatable:
Since I can't replace the device entirely with my own, I thought about putting my own router behind theirs.
Here is mentioned the bridge alternative, which I don't fully understand:
None of this routers have a bridge mode, so I did the following:
I connected my own router via Ethernet to the ISP’s router. Then in my router the wan is:
- Gateway (ISP’s LAN):
I also disabled UPnP and dynamic DNS from both, and Wi-Fi from the ISP’s router.
So will the devices connected to my router be secured from anyone inside of the ISP’s router?
Could someone tell me if this is a bridged connection, or its difference from a bridged connection?
The setup I mentioned above seems to be working as expected, but I want to be sure it's the right way or at least the safest way to do it.