DD-WRT Router acting as a Switch and Wi-Fi AP
Solution 1:
If you're OK with the Comcast modem's firewalling capabilities then that sounds fine. If it were my network, I would disable the modem's routing and do all the NAT'ing on the DD-WRT router because I'm picky about my firewall rules.