Short Answer

No, users on Spectrum’s WiFi cannot normally access your local network when bridge mode is active.
Yes, they are assigned addresses on a different network and are handled separately from your own router’s LAN.

How the Network Separation Works

When Spectrum bridge mode is enabled, the Spectrum device should stop acting as your main router and instead behave like a modem.
Your own router then takes over:

• Routing
• NAT
• DHCP
• Firewall policy
• Local WiFi

In that arrangement, your local devices live behind your router, not behind Spectrum’s wireless service.

[Spectrum modem in bridge mode]
              ↓
      [Your router]
              ↓
   [Your LAN + your WiFi clients]

If a Spectrum hotspot or Spectrum-managed wireless service still appears, it is normally treated as a
separate service path and not as part of your internal LAN.

Do Spectrum WiFi Users Get Different IP Addresses?

Yes. Devices on your own router normally receive addresses from your private LAN range, such as:

• 192.168.1.x
• 192.168.50.x
• or another private subnet you configured

Spectrum hotspot or Spectrum-managed wireless users are handled separately and do not receive addresses from
your router’s DHCP server. They are placed on a different addressing domain controlled by Spectrum.

Can They Reach Your Local Devices?

Under normal conditions, no. Spectrum wireless users should not be able to browse to your NAS, printers,
workstations, cameras, or other LAN devices just because they are using a Spectrum hotspot or Spectrum-managed SSID.

They are not supposed to have:

• Direct Layer-2 access to your LAN
• Access to your router’s private subnet
• Visibility into your local broadcast domain
• Access to your DHCP-assigned client space

What Risk Still Exists?

The main concern is usually not direct LAN access. The more realistic issues are:

• RF congestion: extra wireless activity sharing the same spectrum
• Misconfiguration: accidental exposure caused by your own router settings
• Public service exposure: services you intentionally or unintentionally expose to the internet

For example, if your own router has open port forwards, exposed remote administration, UPnP-created mappings,
or public-facing services, outside users may be able to reach those services from the internet. But that is a separate issue
from Spectrum hotspot users being on your LAN.

How to Verify the Separation

1. Log into your own router.
2. Check the WAN address on your router.
3. Confirm your LAN clients are receiving private IP addresses from your router.
4. Review your DHCP client list to see which devices are actually on your network.
5. Scan for any Spectrum SSIDs and confirm they are different from your own SSID.

If bridge mode is working properly, your router should be handling all local addressing and client visibility for your own devices.

Practical Interpretation

The easiest way to think about it is this:

They may share the same physical hardware enclosure or nearby radio space, but they are not normally placed inside your
private routed network.

Best Practice

• Keep Spectrum in bridge mode
• Use your own router for LAN, firewall, and WiFi
• Disable unnecessary port forwarding
• Review UPnP settings
• Keep your router administration limited to your LAN
• Use strong wireless security on your own SSID

Bottom Line

If Spectrum bridge mode is enabled and your own router is handling the local network, then Spectrum WiFi users should
not be able to access your local LAN. They are typically assigned to a separate network and use different
IP addressing than your internal devices.

The real security boundary is your own router, so that is where your LAN protection should be enforced.