Question Network Question

[NigelJ]

I have an issue with my home network. I use a Draytek 2820 hardware firewall. I connect my two desktop PCs, and my NAS to it (using Ethernet). As it doesn’t have wi-fi I also connect an Apple Airport Time Capsule (in bridge mode) to it to connect wireless devices (I don’t really need this anymore, other than for wi-fi, as I no longer have a Macbook). For internet access I use the router provided by my broadband provider (EE) which is a Smart Hub SH31B. Recently the internet keeps dropping out, and I’m wondering if the Draytek is on its way out (it’s several years old). I’m wondering if I use the EE Smart Hub for everything how secure I will be? I know EE can access it remotely, but how much will they be able to see? I imagine they will be able to see which devices are connected to it, but will they be able to see anything on those devices (data files, pictures, music etc). Just to be clear, I don’t have anything on my devices that I shouldn’t have.

 

[Ralston18]

This Router/Gateway?

https://deviceguides.ee.co.uk/ee/smart-hub-pro-windows-11/

[Verify that I found the applicable guide.]

The router's default IP address appears to be 192.168.1.254 and can thus be used to gain access to the router's admin screens. However you must have the admin login name and password to do so. Or reset the router to the default values per the router's guide.

Connect your network devices directly to the router thus bypassing the Draytek 2820.

Disconnect all devices from the Draytek add each wired device to the router one-by-one ensuring that each PC and the NAS is on the network before adding the next device to the network. Then move on to wireless devices.

The first objective being to restore network stability and internet connectivity.

= = = =

Unless you specifically grant the necessary access rights EE will not be able to "see" what is on your network devices.

All EE should be able to see is the router itself via its' mac and assigned public IP address which should not be revealed.

You can go to What is my IP (and there are other similar links) to learn what public iP address your router is currently using.

As for the router and connected network devices they will all be using IP addresses from one of the three private IP address ranges set aside for small networks. Either DHCP or Static as you configure or assign.

FYI:

https://www.lifewire.com/what-is-a-public-ip-address-2625974

https://www.lifewire.com/what-is-a-private-ip-address-2625970

Understanding IP addressing is part of being able to understand and address your security concerns.

 

[bill001g]

Pretty much the smarthub router is too stupid to allow the ISP to do much. Since it appears you have some kind of modem in front of it they likely will never have any need to access it.
I would suspect if you change the admin password they will not have any access. If this was a modem/router combo unit then maybe they would have a bit more access.

It would be rare for the router itself to be able to see file systems on a PC/NAS etc. That router is so stupid it does not even support the use of a external USB so the router can act as a NAS to your pc. This is a rather stupid feature because the performance is so poor even on routers that do support it. Maybe a ISP could see file names that were shared on a USB drive but the router itself has no ability to open a file and see what is inside.

Now in theory the ISP could setup a VPN and access your local network but they have better things to do.....the smarthub also does not support vpn anyway.

From a overall security standpoint a home user really doesn't need any kind of firewall. By default no traffic can get to your internal device from the internet because of the NAT. You would have to use port forwarding rules to allow access from the internet. I guess if you have people you can not trust connected to your internal network you might need a firewall to prevent traffic between machines on your internal network. Still having someone inside your house you can't trust can't be fixed with some magic box. If they have access they can reset it or just simply cable around it.