I have this concern that having my devices directly connect to the wifi router provided by my ISP could lead to security issues. For example if the router gets hacked and the DNS servers are modified to point to some hacked server somewhere.
Also the ISP-provided router does not have options such as guest mode which I would like to use for some things such as the smart TV.
Besides that what I would like to do is to separate some devices such as the network printer so that they are not directly accessible from the ISP-provided router (in the event it gets hacked).
So what I was thinking is to add one more wifi router (e.g. this Trendnet TEW-828DRU AC3200), which would have its own wifi network and would connect to the ISP-provided router using a LAN cable.
The questions I would like to ask about this are:
- The ISP-provided router has NAT modes such as "Routed with NAT", "Routed without NAT", and "Bridged". What difference (if any) would each of these have on the security?
- Would an additional router like this actually increase the security or would it require anything else (such as a hardware firewall, a switch, a separate VLAN for the devices I esp. want to protect, etc)?