I have a BT Smart Hub as my router which has no guest network functionality, I also have a Netgear Nighthawk D7000.
Initially I attempted to use only the D7000 and take advantage of the guest wifi feature but I couldn't get the setup right so that BT's YouView and Internet TV Channels worked as required (some are encrypted eg BT Sport so wonder if this was the problem).
I was considering a setup like this:
Phone Line | | Main router, BT Smart Hub (has guest access) | | | \ | TV YouView etc Guest wireless devices | | 2nd / D7000 router (LAN on Main router -> Internet port on 2nd / D7000)
Is the setup destined to cause endless headaches setting up or is it quite straight forward?
The BT Smart Hub actually has an extra WAN port too, I wasn't certain if it was even a possibility to go from this WAN port to the Internet (WAN?) port on the D7000? Are there any extra benefits to this if it is possible? More secure? Any harder to setup?
Tackling the issue that the Guest wireless device (or LAN connected) could take over the Main router and effectively track all traffic to and from the Internet from the Private router (which has my laptop / pc / mac etc), would using a VPN like F-Secure Freedome on all devices on the 2nd Private router significantly mitigate or even stop any MITM there? Is there any risk of direct access to the devices on the 2nd router via the main router or will the firewall in the 2nd router block this?
This question is sort of a follow up to the one here as one of the answers suggested the setup here was backward but even if reversed would open the setup to Man In The Middle attacks and have all network out of the 2nd router potentially exposed.