> and now I rent ISP-managed CPE. It's the only way. An ISP provided consumer grade router (and that's what they all are) isn't any better than the one you buy

> and now I rent ISP-managed CPE. It's the only way. An ISP provided consumer grade router (and that's what they all are) isn't any better than the one you buy yourself and almost certainly worse. My ISP uses 802.1x and I bypassed it completely by pwning the provided router to get the keys. The only "way" if you're concerned about security is to run your own gateway with whatever Linux, FreeBSD (*sense), or OpenBSD suits your particular needs. You can of course run it behind a ISP provided gateway in bridge mode, but I always prefer to get another cheap piece of hardware out of the chain if I can.