Security difference between unchecking diagonal vs separate VLANs

[Rocket88]

>LAN = Everything Ticked

Devices on the LAN Ethernet will have access to everything on the system. Since you are the only one with ready access, and you don’t plan on having a LAN WiFi that’s probably OK.

>GUEST Source to Guest Destination Ticked
>X1 Source to X1 Destination Ticked (port1 selected)
>X2 Source to X2 Destination Ticked (port2 selected)
>X3 Source to X3 Destination Ticked

These are the so-called diagonal settings. These allow device on a specific vlan to connect to other devices on that VLAN. I believe you will want to uncheck these “diagonals”.

>I don’t see any diagonal tick options now know what is meant by diagonal as i just see Rows & Columns

See above.

Something that you may not understand is that All devices have access to the WAN port. EG all devices have access to the Internet. Off the top of my head I don’t know there’s a way to prevent that (there probably is) but the assumption is that of course all devices need access to the internet.

[Rocket88]

> My plan is to bridge the ISP router straight into the back of pcWRT router.

Assuming your “ISP Router” is a router not a modem, then I would suggest you may want to remove it, especially if performance (AKA Speed) is a concern.

In most cases unpluging it and connecting your pcWRT router is all you need to do.

However, if that doesn’t work you may need to do some configuration. That all depends on how your Internet Service Provider has things set up. If they require a fixed IP Address (unlikely) or a specific Mac address (used to be a common requirement but less so now) or possibly something other than DHCP then configuration would be required. If plugging the pcWRT router in directly does not work, then check to see if they have an FAQ about router requirements.

Definitions:

Modem – has a single input, either coax (cable modem) or telephone (DSL Modem) or fiber option (Optical Network Tranceiver) and provides a single Ethernet output.

Router- Connects to a modem and provides multiple Ethernet out puts and/or wifi

[Author]

Posts