yes the inverse setup works too, but needs extra firewall protection.
Also, each router can have it's own AdminUser/Password. it is NOT true that they
need be the same and actually better that they are not.
the setup modem -- newrouter(lan) -- (wan)oldrouter---oldSystems
would allow oldSystems to guess IP addresses on newRouter and attempt to access
via \\ipaddress\share or http : / ipaddress
The newRouter(lan) will create an IP address on the oldRourter(WAN) in the ip-range
defined for the newRouter - -
for illustration, if newRouter is at 172.16.1.1 and has a DHCP range of 2-10,
then you use the oldRouter Mac to perform an Address Reservation on your newRouter
OUTSIDE the dhcp range (say 1.100) to avoid address conflicts.
With Address Reservation, you don't need to touch the oldRouter
:giddy:
the oldRouter will create a gatway address =:= to its own IP address, eg 192.168.x.y
which will flow thru the Wan address (172.16.1.100) and on to your gateway address on the newRouter.
To slam the door on such all attempts (recall new router has a different non-routable IP address) add to your firewall deny rules for input from oldSystem.
So add a rule to your FW
deny in tcp/udp source-ip 192.168.x.0, mask 255.255.255.0
and your newRouter will be seen, but NOTHING else