One modem and two routers provide two separate Wi-Fi networks. New apartment setup.
One modem and two routers provide two separate Wi-Fi networks. New apartment setup.
I’m setting up in a new place with built-in Wi-Fi, but I’m worried about keeping my data private—especially for banking online. My smart devices like Google Home and Chrome Cast are also connected, and I don’t want them interfering. Could I connect my own router to theirs so we can keep the networks separate?
Connect your other router straight to the modem. This keeps the networks isolated and ensures you only share your internet link. Don't stress about banking—your data travels through a secure layer that reveals only the destination of your packets, not their content.
Preferably you need two routing layers (one router before the two routers) or a firewall such as PF-Sense, followed by a switch, then your routers. Most modems lack dual Ethernet ports and chaining routers can cause all devices to share a single network.
You could connect any client port from their router to your wan port and enable double NAT. This would isolate your network and block direct PC access. They might still monitor your internet activity if they're skilled. To fully block this, you'd need to use a VPN.
You can increase the bit rate, as discussed earlier. However, since the data will pass through the router, there are methods they could use to monitor it. Especially if they're tech skilled. If you're not in charge of any link between the client and the internet, the risk increases. That means they might be able to intercept the information. Still, for sensitive transactions like banking, SSL encryption is essential—so you probably don’t need to worry too much about it. Decrypting encrypted traffic isn't a straightforward process.
Best practice is to isolate each network using its own VLAN instead of relying on a double-NAT setup. While most users wouldn’t notice a double-NAT, it may lead to problems with gaming and UpnP apps. You’d need a managed or smart switch with VLAN tagging and a routing device that supports VLANs. Then apply access VLAN rules per port on the switch.