Need advice for home network with RB1100 and CRS125

Hello everyone,
As a rookie in Mikrotik world i have some qestions.

I have RB1100AHx4, CRS125-24G-1S-2HnD-IN and wAP ac. I wanna set up my network properly, to achieve max. (1GB) speed over network.
I need 1 WAN port, 2GB connection (between RB and CRS), 1GB connection to wAP (only wAP will have enabled WiFI), with basic firewall protection for home use.
Devices: 2 x wired NAS, 2 x wired PC’s, TV ( wired and wireless), 2 x WiFi laptop. Max speed between PC’s, NAS and TV is most important. All have static IP-s.

Q1. Suggested setup: Modem, Router, Switch, wAP or Modem, Switch, Router, wAP or somethig else?
Q2. Router settings (do i need firewall, DHCP enabled)
Q3. Switch settings (do i need firewall, DHCP enabled)
Q4. Which firewall rules for basic (suggested) protection
Q5. wAP - enabled both 2 and 5GHz WiFi, on 2GHz 2 AP (1 for guests with speed limit, 1 for home use - no limits)
Q6. Are those Mikrotik devices good for those needs?
Q7. I have one extra UTP cabel from modem for ISP TV provider. Is it possible to isolate 1 port on 1st device, take traffic for TV over 2Gb connection to 2nd device and connect TV from there?

Help and examples would be greatly appreciated.

Thanks in advance for all answers.

A1. Is your modem a router as well: YES = sell RB1100/NO = Modem, Router, Switch, wAP
A2. A router needs a firewall, especially when publically available (public IP address)
A3. A switch is a switch, no router → no firewall
A4. Default firewall rules are sufficient
A5. SSID per network, VLAN is a very nice way to (virtualy seperate networks): http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
A6.: Yes
A7.: Yes (have a look at VLAN)

Examples can be found in the supplied link.

Wont get 1gig via wifi until maybe WIFI7, so hold off on buying new APs till then. :slight_smile: