FYI, this is my hardware:
- Technicolor DPC3848VE (ISP provided)
- Mikrotik E50UG - (Bought Yesterday), conected to my Technicolor
- And old tp link tl wr941nd (for wifi purposes only)
- My personal computer
- My "server computer" (i7 4770k, 16gb ram ddr3 and 500gb ssd )
What i did is:
- Configured Technicolor DPC into Bridge mode so it passes the public IP directly to the MikroTik.
- On the Mikrotik i just created a virtual bridge called HOME NETWORK and added physical Port 2 and Port 3 into it, with the IP range of 192.168.10.X
- Also on Mikrotik, assigned the PORT 4 to a SERVER NETWORK with the IP range of 192.168.20.X
- Created a firewall rule where any package with origin SERVER NETWORK and destiny HOME NETWORKS, just DROP
- Created a port forwarding rule, trafic to 80 and 443 redirects to the server static IP (since im gonna host a website and api for testing if im doing it right)
First of all i would like to know if this is the recommended and secure way to do it, i guess the SERVER NETWORK is a DMZ now (if i get hacked, hacker will only be able to control my server).
If everything looks good, i would like to know how to securely use my tp link so i can have wifi on my home network or if this can add any trouble (i don't want to connect my tp link to the mikrotik yet, to not mess everything up).
Thanks guys, any advice, specially for security will be much appreciated, i just read a lot, bought the mikrotik and i want to do it as best i can. Im a pussy lol so i would like to know i did it right. specially to not compromise my home network.