AlgoVPN Setup Guide

# Setting Up a Secondary Router Behind Your ISP Router for Enhanced Security

Many homes use only the router/modem provided by their Internet Service Provider (ISP). While this is convenient, it often lacks advanced security and privacy features. By installing your own secondary router behind the ISP router, you gain more control, better security, and access to advanced features like VPN routing and parental controls.

---

## Why Add a Secondary Router?

1. **Increased Security**:
   - Separates your private network from the ISP-provided network.
   - Protects devices from vulnerabilities or misconfigurations in the ISP's router.
   - Helps isolate smart home/IoT devices from more sensitive computers or phones.

2. **Greater Control**:
   - You can choose your own DNS provider (e.g., OpenDNS, Cloudflare, etc.).
   - Configure custom firewall rules, content filtering, and device-level monitoring.

3. **Privacy and VPN Capabilities**:
   - Some advanced routers support routing specific devices through VPNs.
   - You control when/where traffic is encrypted (e.g., sending your child's tablet through a VPN but not your smart TV).

4. **Improved Features**:
   - Quality of Service (QoS) prioritization for gaming, video calls, or streaming.
   - Advanced parental controls.
   - Guest network segregation.

---

## Recommended Router Features

When shopping for a secondary router, look for models with the following:

- **VPN Client Support** (especially WireGuard and OpenVPN)
- **VPN Fusion / Policy-Based Routing** (route some devices through VPNs, others not)
- **Dual-band Wi-Fi 5 or Wi-Fi 6**
- **Strong parental control tools**
- **Ongoing firmware support**

### Popular Router Options

| Model | Features | Price (Approx.) |
|-------|----------|-----------------|
| ASUS RT-AX58U | VPN Fusion, Wi-Fi 6, Parental Controls | $150 |
| Netgear Nighthawk R7000 | OpenVPN support, DD-WRT compatible | $120 |
| TP-Link Archer AX55 | Wi-Fi 6, QoS, HomeCare (w/ antivirus) | $130 |
| GL.iNet Flint | WireGuard/OpenVPN, travel-ready, flexible | $100 |

---

## Step-by-Step: Installing a Secondary Router

### 1. Unbox and Prepare Your New Router

- Plug it into power but **don’t** connect it to anything else yet.
- Find the default admin IP (usually `192.168.1.1` or `192.168.0.1`) and credentials (printed on the router or in the manual).

### 2. Connect to the ISP Router

- Locate an available **LAN port** on your ISP-provided router.
- Connect one end of an Ethernet cable to this LAN port.
- Plug the other end into the **WAN (Internet)** port on your new router.

Now the new router is connected to the internet via your ISP router.

### 3. Access Your New Router’s Admin Panel

- Connect to the new router’s Wi-Fi (SSID printed on the device or box).
- Open a browser and go to its admin IP (e.g., `192.168.50.1`, `192.168.0.1`, etc.).
- Log in with default credentials.
- Change the admin password immediately for security.

### 4. Configure Basic Settings

- Set a custom SSID and Wi-Fi password.
- Disable remote admin access unless you need it.
- Set the router to **Router Mode** (not Access Point mode).
- Ensure it receives a WAN IP from the ISP router — confirm this in the WAN status page.

### 5. (Optional) Adjust Your ISP Router Settings

To avoid double NAT or IP conflicts:

- Change the ISP router’s IP range to something like `192.168.0.1/24`
- Keep your new router on a separate subnet like `192.168.50.1/24`
- **Disable Wi-Fi** on your ISP router to avoid confusion and bandwidth competition

Alternatively, if your ISP router allows, you can enable **bridge mode** to turn off its routing features entirely — leaving your new router in full control.

> ⚠️ Be cautious with bridge mode. If done incorrectly, it can break your internet until reset.

---

## Step 6: Switch All Devices to the New Router

- Have all household members forget the old Wi-Fi network on their devices.
- Connect all phones, tablets, laptops, smart TVs, etc. to the new router’s SSID.
- Devices will now benefit from better performance, filtering, and VPN (if configured).

---

## Step 7: Configure Advanced Features

- **VPN Routing**:
  - Log into the router admin panel and set up OpenVPN or WireGuard with your VPN provider.
  - Use VPN Fusion or policy routing to choose which devices go through the VPN.

- **Parental Controls**:
  - Set internet schedules (e.g., no internet after 10 PM)
  - Block sites by category or domain (e.g., using OpenDNS or built-in tools)

- **QoS and Monitoring**:
  - Prioritize Zoom, Teams, or gaming devices.
  - Use traffic monitoring dashboards to identify heavy usage patterns.

---

By setting up a secondary router, you take a powerful step toward managing and securing your home network. This approach gives you flexibility and control far beyond what your ISP equipment can offer.