How to isolate the home network from the provider's devices?

Question

Computer networks

I bought an apartment and approached the moment of connecting the Internet. There are a couple of providers in the house, the choice fell on a provider with fiber optics. The provider put the following terminal in the entrance: eltex ntu 2w. It's time to set up your home network. First I bought one router (Mikrotik hap ac2), installed it in the entrance group of the apartment and connected it to the terminal. After using it a little, I realized that wi-fi does not cover the entire apartment. I bought myself a second one of the same microt. Set up capsman between two routers (seamless roaming). Everything is working. But after setting up capsman, it turned out that all devices were forwarded to the provider's terminal. The routers are connected to each other in series. From the provider's terminal, the cable comes to the ethernet (1 port) of one microt and the next microt is connected to the first microt also through the first port. So, after setting up capsman, my devices began to receive an IP address from the dhcp server of the provider's router. I would like the provider's terminal to know nothing about my home devices at all. I want home devices and the second microt to receive IP addresses from the first microt. Where to dig, what to google?

Answer 1

on the first Mikrotik, pull the first port out of the bridge;
on the bridge, set a static address from another private network;
raise a DHCP server;
raise NAT so that ethernet1 acts as a WAN interface.

Answer 2

Or, as indicated above, you will have access to the Provo terminal, you only need to allow it in the firewall.
Or - we transfer the Provo terminal to the "bridge" mode. And we raise all the connections on the first world. That is, an Internet connection to the provider and everything else (as on a regular twisted pair cable)

Answer 3

NAT - this is isolation.