Hi,

super basic setup: hEX S with pppoe internet on port 1.
LAN: 192.168.1.0/24
Modem: 10.10.10.1/30

In order to access my modem which is in front of my RB, there are 2 options and I'm wondering which one makes more sense or if they're both equal?
Option 1: Add ether1 (10.10.10.2/30) to WAN list --> maquerading working fine due default NAT
Option 2: Create dedicated interface list called "Modem" containing only ether1 and add another dedicated masquerading for this list

My question sounds stupid but when going for option 1, I end up having 2 interfaces in WAN list (pppoe + ether1) vs. having dedicated lists/separated interfaces?
Are there security issues/pro's/con's for either solution or is option 1 simple & save?
Is it save/best practice to throw ether1 in WAN list "just for modem access"?

Thanks for your thoughts!

Option 2:

I prefer usually option 1 when modem is just a bridge.

This is the way

Thanks for your thoughts, I decided to go for option 1 then as it seems to be the easiest/quickest option in order to keep my config as slick and "clean" as possible