Home network advice with 2 routers

[network2000]

I'm trying to set up a home and office network. I would like to use the routers to extend the coverage of my wireless network and protect the network with a firewall.

I have two Asus RT-AC66U routers with Merlin firmware, a managed gigabit TP-Link TL-SG108E switch with VLAN capability and a MediaAccess TG789bvn modem. As far as devices go, a NAS, Raspberry Pi and an Android TV box. The TV box should be able to reach the NAS. The RP should be reachable from the IP given to me by my ISP.

To keep the noise to an acceptable level, I would like to place the NAS, the Raspberry Pi, the modem and the switch in the meter cupboard. From there, there are CAT6 ethernet cables that go to the office and the living room, which should provide enough wireless coverage with the routers.

The routers can be set in either router, repeater or access point mode. I don't have the option to connect a cable directly between the routers, without the switch in the middle. The MediaAccess TG789bvn modem has DHCP enabled and can't be turned off. It also does not have a firewall. Any advice on how to set this up, given that the routers do have firewalls?

 

[bill001g]

So the device you call a modem is actually a router which is a good thing since you can't hook it up the way you want if it was just a modem.

It should be as simple as setting your routers to AP mode. The other routers are made into pretty much dumb switches with wireless radios.

 

[network2000]

So the device you call a modem is actually a router which is a good thing since you can't hook it up the way you want if it was just a modem.

It should be as simple as setting your routers to AP mode. The other routers are made into pretty much dumb switches with wireless radios.

Ah, thanks. The modem/router does not have a firewall though, and its settings are locked down by the ISP. Doesn't this leave my network vulnerable?

 

[bill001g]

Not really the NAT function alone will protect your machine. Unless you setup port forwarding the NAT does not know which machine to give traffic coming in from the internet to so it just discards it. So in effect you have a firewall rule that says no incoming traffic is allowed unless it was requested by one of your machines.