I’ve faced similar dilemma and as hyak suggested deployed an ISP approved modem/router and disabled the WiFi and connected to 610 AP in gateway mode. It’s working for now anyway.
I too had a surfboard modem but the consensus seemed to be that without a router, it wasn’t secure.
I too would love to take advantage of my icx switch (for Poe to 610, eth access, etc) but have yet to find any IT/networking consultant who will take the required time to setup—and have no access to enterprise-level folks.
My icx 7150-24p has been sitting in a box for two years—Poe doesn’t work, cannot be factory reset using manual procedure and cannot access it. Shame after spending ~ $2,000.