- Now this is an excellent point. The concern that drives me is that I can 'bypass' the ERX by cabling from modem to bridge to unmanaged switch to eth0 and from switch to eth4 and access my devices directly. The danger is that connecting the WAN to eth4 exposes my LAN to the Internet.
I can simply firewall (block) all inbound traffic on eth4 except traffic from devices in the bridge (my radios).
Thanks