I use a Cisco 1841 ISR behind Spectrum’s Arris device. To simplify things, I placed the Arris in Bridge Mode, so the 1841 receives the registered IP address directly. All decision making has been removed from the ISP’s equipment. From there, it’s all ACLs to control inbound and outbound traffic, including a roll-your-own L2TP VPN and other “services”.
