Hi,
super basic setup: hEX S with pppoe internet on port 1.
LAN: 192.168.1.0/24
Modem: 10.10.10.1/30
In order to access my modem which is in front of my RB, there are 2 options and I'm wondering which one makes more sense or if they're both equal?
Option 1: Add ether1 (10.10.10.2/30) to WAN list --> maquerading working fine due default NAT
Option 2: Create dedicated interface list called "Modem" containing only ether1 and add another dedicated masquerading for this list
My question sounds stupid but when going for option 1, I end up having 2 interfaces in WAN list (pppoe + ether1) vs. having dedicated lists/separated interfaces?
Are there security issues/pro's/con's for either solution or is option 1 simple & save?
Is it save/best practice to throw ether1 in WAN list "just for modem access"?
Thanks for your thoughts!
Option 2: