Guest wifi separate/different dhcp/dns? - ax88u pro?

[neednetworking]

Imagine the scenario where an old windows server is currently the dns and dhcp server, but we want to install a rt-ax88u pro as the new router with both internal and guest wifi. Now the internal wifi users should get dhcp and dns from the windows server, but the guest wifi users will NOT be able to get dhcp/dns from the server because intranet will be blocked thru the guest wifi setting. So, is there a way to offer different dhcp/dns to guest wifi users from the asus router directly? I am guessing it will have to be a different subnet and/or vlan. I think we could theoretically turn dhcp off on the windows server and just use the same dhcp for both guest and internal wifi users from the ax88upro, BUT the DNS has to be kept on the windows server for the internal workstations to access dns for domain services i think. I suppose we could put a primary and secondary dns server in the dhcp, but i think that would possibly cause flakey inconsistent delays? Thoughts??

 

[bennor]

If you use Asus-Merlin on the Asus router then it's possible to setup Guest Network with its own IP and DNS values. See YazFi:

YazFi - YazFi v4.x - continued

v4.4.4 Updated 2023-11-26 Feature expansion of guest WiFi networks on AsusWRT-Merlin, including, but not limited to: * Dedicated VPN WiFi networks * Separate subnets for organisation of devices * Restrict guests to only contact router for ICMP, DHCP, DNS, NTP and NetBIOS * Allow guest networks...

www.snbforums.com

Note that YazFi generally does not work with AiMesh nodes or AP's.

 

[Tech9]

Imagine the scenario

Real scenario or imaginary only? Server, workstations... business? this RT-AX88U Pro is a consumer product with early releases of a new branch firmware.

 

[neednetworking]

If you use Asus-Merlin on the Asus router then it's possible to setup Guest Network with its own IP and DNS values. See YazFi:

YazFi - YazFi v4.x - continued

v4.4.4 Updated 2023-11-26 Feature expansion of guest WiFi networks on AsusWRT-Merlin, including, but not limited to: * Dedicated VPN WiFi networks * Separate subnets for organisation of devices * Restrict guests to only contact router for ICMP, DHCP, DNS, NTP and NetBIOS * Allow guest networks...

www.snbforums.com

Note that YazFi generally does not work with AiMesh nodes or AP's.

I can't use yaz because want to use ai mesh. prefer stock firmware

 

[Tech9]

want to use ai mesh

You have to run DHCP server on the router then. AiMesh requirement.

 

[neednetworking]

I think with "guest network pro" it might allow dedicated separate dhcp and dns for the guest network on it's own vlan. That might work. Can anyone confirm?