[PoddyMcQ]

Hi, New here

this is my first post.

My question is, what recomendations do you have for a router?

I currently have a Netgear DGN1000 router. the problem i have is i need one with at least 5 ports, 8 would be desirable.

when i google prices i get results for managed and unmanaged switches, do i need to think about managed switches or can just use an unmanaged switch?

Thanks

 

[Old Rich]

You can just attach a unmanaged switch . .

 

[PoddyMcQ]

i'll still be able to set static I.P. and reservations on the switch?

 

[Old Rich]

You won't set anything on the switch . . where are you setting static IP's now?

 

[PoddyMcQ]

both browsers and "Attached Devices" list via routerlogin.net

 

[Old Rich]

Then you would continue to do that with the switch . . it is just an extension of the router.

Why do you want static IP's ?

 

[PoddyMcQ]

to prevent unwanted access to the router (used currently) i find its another level of security that can be used along with the encryption and password

 

[Wand3r3r]

Only the level of encryption [wpa2] and complex wifi passphrase are the keys to unwanted access. Static ips are moot if they get past the encryption.

 

[PoddyMcQ]

even if the IP address is limited to say 5 I.P.s for 5 devices?

 

[Maz_-]

You could look at using MAC address filtering if you are that concerned about security.

 

[Wand3r3r]

"even if the IP address is limited to say 5 I.P.s for 5 devices? "

Are you using subnet mask 255.255.255.248? [limit of 6 available addresses]
If not then yes even with 5 static ips even with ip reservations you can be hacked if they get past the wifi encryption.

As a standard we use 255.255.255.0 which gives 254 ips. As an example I could plug into your network with a static ip not in the reserved ip range and have access to your lan. Of course I would need to first know your ip range but that is what hacking is all about. Many ways of getting that info especially if I have hacked your wifi passphrase.

Even mac filtering can be gotten around.
"MAC filtering can be circumvented by scanning a valid MAC (via airodump-ng) and then spoofing one's own MAC into a validated one. This can be done in the Windows Registry or by using commandline tools on a Linux platform."
MAC filtering - Wikipedia, the free encyclopedia

Now this isn't saying limited ips/mac filtering isn't worth the time to do. The whole idea behind this kind of security is to make your network not easy so the hacker moves on to easier prey.

Its that first point of contact with wpa2 and a complex passphrase that is the bastion of your network protection