Access restrictions
My router has been configured to allow only three devices to login to its management console (Web UI): my PC, laptop, and mobile phone. The router uses the devices' IP addresses as the access filter (essentially, a "white list" of permitted devices/IPs).
This means those devices' IPs must not change when they join the network (the router's DHCP server may do that automatically). If a device's IP changes, that device will not be allowed to login to the management console because its new IP will be different from the one stored in the access list. Therefore, I configured the router to make those device IP addresses static IPs, which means the three devices will always have the same whitelisted IPs when they join the network.
Firewall settings
- IPv4 firewall: Enabled
- IPv6 firewall: Enabled
- DoS (Denial-of-Service) protection: Enabled
- Respond to ICMP Echo (ping) Requests from WAN: Disabled
Wireless settings
My router is a Wi-Fi 7 dual-band router (2.4 GHz and 5 GHz bands). Here are the settings for each band:
- 2.4 GHz - channel bandwidth: 20 MHz, control channel: 11.
- 5 GHz - channel bandwidth: 40 MHz (160 MHz is enabled), control channel: Auto.
- WPS (Wi-Fi Protected Setup): Disabled
Miscellaneous settings
- Management console remote access from WAN (internet): Disabled
- SSH (Secure Shell): Disabled
- Telnet: Disabled
- UPnP (Universal Plug and Play): Disabled
- NAT (Network Address Translation): Enabled
- DHCP (Dynamic Host Configuration Protocol) server: Enabled
- DNS (Domain Name System) server: Cloudflare (1.1.1.2, 1.0.0.2) instead of my ISP's DNS server
- DNS Rebind protection: Enabled
- DNSSEC (DNS Security Extensions) support: Enabled
- Validate unsigned DNSSEC replies: Enabled
- Prevent client auto DoH (DNS-over-HTTPS): Auto
- DNS privacy protocol: DoT (DNS-over-TLS)
- DoT profile: Strict
- DoT server: 1.0.0.2 (security.cloudflare-dns.com)
Administrative settings
- Automatic time change (+/- 1 hour) when Daylight Saving Time changes in March and November
- Automatic firmware check and upgrade: Once a day
- Automatic reboot: Once a week
- Automatic management console logout: 30 minutes
Next: My Wi-Fi networks
