DEV Community

Glen Winemiller
Glen Winemiller

Posted on

My Wi-Fi router

#hardware #networking #security

Access restrictions
My router has been configured to allow only three devices to login to its management console (Web UI): my PC, laptop, and mobile phone. The router uses the devices' IP addresses as the access filter (essentially, a "white list" of permitted devices/IPs).

This means those devices' IPs must not change when they join the network (the router's DHCP server may do that automatically). If a device's IP changes, that device will not be allowed to login to the management console because its new IP will be different from the one stored in the access list. Therefore, I configured the router to make those device IP addresses static IPs, which means the three devices will always have the same whitelisted IPs when they join the network.

Firewall settings

  • IPv4 firewall: Enabled
  • IPv6 firewall: Enabled
  • DoS (Denial-of-Service) protection: Enabled
  • Respond to ICMP Echo (ping) Requests from WAN: Disabled

Wireless settings
My router is a Wi-Fi 7 dual-band router (2.4 GHz and 5 GHz bands). Here are the settings for each band:

  • 2.4 GHz - channel bandwidth: 20 MHz, control channel: 11.
  • 5 GHz - channel bandwidth: 40 MHz (160 MHz is enabled), control channel: Auto.
  • WPS (Wi-Fi Protected Setup): Disabled

Miscellaneous settings

  • Management console remote access from WAN (internet): Disabled
  • SSH (Secure Shell): Disabled
  • Telnet: Disabled
  • UPnP (Universal Plug and Play): Disabled
  • NAT (Network Address Translation): Enabled
  • DHCP (Dynamic Host Configuration Protocol) server: Enabled
  • DNS (Domain Name System) server: Cloudflare (1.1.1.2, 1.0.0.2) instead of my ISP's DNS server
  • DNS Rebind protection: Enabled
  • DNSSEC (DNS Security Extensions) support: Enabled
  • Validate unsigned DNSSEC replies: Enabled
  • Prevent client auto DoH (DNS-over-HTTPS): Auto
  • DNS privacy protocol: DoT (DNS-over-TLS)
  • DoT profile: Strict
  • DoT server: 1.0.0.2 (security.cloudflare-dns.com)

Administrative settings

  • Automatic time change (+/- 1 hour) when Daylight Saving Time changes in March and November
  • Automatic firmware check and upgrade: Once a day
  • Automatic reboot: Once a week
  • Automatic management console logout: 30 minutes

Next: My Wi-Fi networks

Top comments (0)