3 ms·
Most (99%+) consumer stuff will default to NATing. You can turn it off. Usually just set something like router2 = 192.168.2.0/24, router1 = 192.168.1.0/24, and
by dylz 6y ago
Most (99%+) consumer stuff will default to NATing. You can turn it off.
Usually just set something like router2 = 192.168.2.0/24, router1 = 192.168.1.0/24, and you're fine. If you don't do this, you end up with conflicts/no route to host/no connectivity.
Do note that this is not a guarantee and a kind of side-effect. It may still be possible to sniff all traffic, look for ARP, etc. What you really want is a prosumer or enterprise device that can totally separate VLANs.
- natch 6y agoHave any examples of any such devices on the prosumer (affordable-ish) side? To say my “adversary” here is very sophisticated would not be overstating things.
- dylz 6y agoSorry, didn't notice this. Cheap consumer devices - see OpenWRT's site for compatible ones you can flash firmware onto, otherwise <$100 Edgerouter/Edgemax from UI is common.