Search results

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

  1. pjv

    Solved Guest network isolation changes 384 v 386 / AC68U v AX86U

    The iptables rule in the post above had no effect. So I went the YazFi route using DHCP reservations with dnsmasq.postconf per the link in Jack’s post above (#4). After re-writing all the home assistant configs that were addressing IOT devices with hard-coded IP addresses to use their new...
  2. pjv

    Solved Guest network isolation changes 384 v 386 / AC68U v AX86U

    GSpock, I'm not sure when my next opportunity will be to monkey with the AX86U, but based on some researching, my next wild flail will be inserting this iptables rule: iptables -t filter -I PControls -i br0 -o br0 -j ACCEPT That rule exists on the AC68U but the corresponding rule on the AX86U...
  3. pjv

    Solved Guest network isolation changes 384 v 386 / AC68U v AX86U

    I've now tried a lot of variations on the ebtables rules posted above, moving them to various tables and chains and had no good results. I've also tried inserting various iptables rules on the guess that maybe the ebtables ACCEPT targets might be dumping packets into the iptables tables and...
  4. pjv

    Solved Guest network isolation changes 384 v 386 / AC68U v AX86U

    Thank you John. I did verify the ebtables rules were there and I also checked the broute table and it is identical on the AX and the AC. I also tried inserting an additional BROUTE rule using the IP address of the home assistant box: ebtables -t broute -I BROUTING -p IPv4 -i wl0.2 --ip-dst...
  5. pjv

    Solved Guest network isolation changes 384 v 386 / AC68U v AX86U

    Off the top of my head, I think the DHCP assignment of reserved IPs is the only good reason. (One bad reason is lazily not wanting to have to scan through my entire lengthy set of home assistant config files and re-write all the device IP addresses in them, but I can suck that up). I do have a...
  6. pjv

    Solved Guest network isolation changes 384 v 386 / AC68U v AX86U

    Thank you, Jack. I installed YazFi on the AX yesterday while I was looking for a quick fix. I seemed to run into a wall there with trying to keep my IOT devices on the same network numbers as my other stuff and be able to use static DHCP assignments for them (which I need to do). When I tried...
  7. pjv

    Solved Guest network isolation changes 384 v 386 / AC68U v AX86U

    For the last couple years, I've been running an AC68U with 384.14_2. I just bought a new AX86U and have installed 386.3_2 on it. I configured everything from scratch / manually on the new AX so as not to push anything wonky from an old backup. Everything worked great except for one thing. I...
  8. pjv

    VLAN or Isolated LAN for IP Cameras using ASUS RT-AC68U?

    Wish I had some other ideas. Here is a page I found with a lot of practical information on troubleshooting bridges.
  9. pjv

    VLAN or Isolated LAN for IP Cameras using ASUS RT-AC68U?

    I don't know the answer to that question, but reboots are often helpful. I have the script being called from the `nat-start` script. The merlin wiki has good documentation on getting started with scripts, here. Edit: Are you sure that the device on your main network that you want to be able to...
  10. pjv

    VLAN or Isolated LAN for IP Cameras using ASUS RT-AC68U?

    here's what my ebtables look like pjv@rt-ac68u:/tmp/home/root# ebtables -L --Lx --Lmac2 ebtables -t filter -A FORWARD -s aa:bb:cc:dd:ee:ff -o wl0.1 -j ACCEPT ebtables -t filter -A FORWARD -d aa:bb:cc:dd:ee:ff -i wl0.1 -j ACCEPT ebtables -t filter -A FORWARD -i wl0.1 -j DROP ebtables -t filter...
  11. pjv

    Any way to access guest wifi nodes from regular network?

    Take a look at these two recent posts and see if they might help you: https://www.snbforums.com/threads/vlan-or-isolated-lan-for-ip-cameras-using-asus-rt-ac68u.61264/#post-542228 https://www.snbforums.com/threads/vlan-or-isolated-lan-for-ip-cameras-using-asus-rt-ac68u.61264/#post-542406
  12. pjv

    AC86U (Merlin 384.14_2) WebGUI hung

    This happens enough for me since I started managing a client's AC86U that I created a bash alias using SSH to fix it from the command line. alias fix_router="ssh pjv@10.X.X.X service restart_httpd"
  13. pjv

    VLAN or Isolated LAN for IP Cameras using ASUS RT-AC68U?

    Ah so. Sorry I missed that part about the camera's being wired. So then this is off-topic, but my ebtables rules script looks like this: #!/bin/sh ## allow home assistant to talk to IoT devices on firewalled guest network MAC="XX:XX:XX:XX:XX:XX" # HA box ether mac address EBT=$(ebtables -L...
  14. pjv

    VLAN or Isolated LAN for IP Cameras using ASUS RT-AC68U?

    I use a guest network with the "access intranet" setting disabled for all my IOT devices. Then I have a single host on my LAN (in my case, it is a little server running Home Assistant) that is able to communicate with the IOT devices via some custom ebtables rules in the nat-start script.
  15. pjv

    Block internet for a single IoT device?

    I do this with various IOT devices. It works great.
  16. pjv

    A Guide About Installing ZeroTier on ASUS AC68U Router

    Thanks very much @MissingTwins for posting this guide. I have been using Tinc for many years for this purpose and was interested in trying ZeroTier as a potential replacement because it seems quite a bit quicker and easier to deploy and manage. In case this helps anyone else, I wanted to post...
  17. pjv

    YazFi YazFi - enhanced AsusWRT-Merlin Guest WiFi inc. SSID <-> VPN Client

    Any chance you could post some kind of conceptual overview, hints, pointers, sample code for how to do it? I'm trying to hack together something quick and dirty to hold me over until that feature of YazFi is implemented.
  18. pjv

    YazFi YazFi - enhanced AsusWRT-Merlin Guest WiFi inc. SSID <-> VPN Client

    Hi Jack Yaz, thanks for your script. I have a question about the upcoming feature on the first page that hasn't yet been incorporated. I have some IoT stuff on my lan that is currently on a guest network which I have turned off intranet access for in the GUI (I have not yet installed your...
  19. pjv

    Does T-Mobile/ASUS TM-AC1900 (RT-AC68U) Support Merlin?

    which CFE did you put on the router with mtd-write? I used 1.0.2.0 US (from the CFEditor site) on both of my routers.
  20. pjv

    Does T-Mobile/ASUS TM-AC1900 (RT-AC68U) Support Merlin?

    FWIW, I recently (a few weeks back) converted two TM-AC1900's to AC68U's using primarily the Bay Area Tech Pros instructions. They are both now running Merlin 384.X (one is at .3 and the other is at .4_2). The two routers were different from each other in what CFE they had installed when I got...
Top