Asus RT-AC68U, need to isolate one LAN port from rest of LAN

[bwarecs]

I've had my RT-AC68U installed for about a week and so far have been thrilled with the performance. Firmware: 3.0.0.4.374_205 Now I have one last item to get set up and will be complete.

I need to isolate one LAN port (let's say port 4) so that it can access the internet, but not see any other clients on my LAN. Or a VLAN would also work, but I haven't found that this router will support a VLAN.

I also have tried adding my old router (D-Link Dir-655) WAN to Asus LAN port 4, which isolates all other clients on <Asus LAN> from seeing <D-link client>, but I actually want the reverse.

Any ideas?

 

[geops]

I've had my RT-AC68U installed for about a week and so far have been thrilled with the performance. Firmware: 3.0.0.4.374_205 Now I have one last item to get set up and will be complete.

I need to isolate one LAN port (let's say port 4) so that it can access the internet, but not see any other clients on my LAN. Or a VLAN would also work, but I haven't found that this router will support a VLAN.

I also have tried adding my old router (D-Link Dir-655) WAN to Asus LAN port 4, which isolates all other clients on <Asus LAN> from seeing <D-link client>, but I actually want the reverse.

Any ideas?

Your only option is using vlans. The router can be setup for vlans but it can only be done from the command line and I don't have the commands you'll need. Search the forum a bit and you'll find howtos on this subject.

 

[bwarecs]

Thanks geops. I have no experience with making command line changes to a router, so I guess I'll start digging...

 

[greyhavens49420]

Your only option is using vlans. The router can be setup for vlans but it can only be done from the command line and I don't have the commands you'll need. Search the forum a bit and you'll find howtos on this subject.

I have been searching and come up empty. Can anyone provide any info? I am in need of the VLAN option as well to create an isolated AP for guest access (needed further than the integrated guest network allows).

 

[dazzle]

Hi,

Did you find a solution to the VLAN enabling? I am also in need of VLAN'ing my AC68U.

Regards

 

[greyhavens49420]

Hi,

Did you find a solution to the VLAN enabling? I am also in need of VLAN'ing my AC68U.

Regards

No I did not. I ended up purchasing a Ubiquiti NanoStation M2 and using the firewall rules to block LAN to WAN communication from my RT-AC68U. A little overkill but it does the trick.

 

[Popupkiller]

Hi.
I thought I'd leave a reply here of what I've got since the 5 last minutes of looking for information.

I did a quick google for rt-ac68u cli commands and came upon this site.
http://www.foxnetwork.ru/index.php/en/component/content/article/146-asus-rt-ac68u.html

To sum it up.
This is as far as I've gotten.

GO to your routers web gui.
Advanced Settings - Administration - System.
Select Yes on Enable telnet.

Use your preferd telnet client to telnet your routers IP on port 23.
Log in with your specified login.

When you are at /tmp/home/root, type busybox to get information about functions you have available.
This includes a list of commands to use in cli.

Now this is as far as I have gotten, and I havent tried figuring out what commands I need for setting up vlans, but theres a starter for you.

 

[Drdod]

Isolate LAN port for guests

I've had my RT-AC68U installed for about a week and so far have been thrilled with the performance. Firmware: 3.0.0.4.374_205 Now I have one last item to get set up and will be complete.

I need to isolate one LAN port (let's say port 4) so that it can access the internet, but not see any other clients on my LAN. Or a VLAN would also work, but I haven't found that this router will support a VLAN.

I also have tried adding my old router (D-Link Dir-655) WAN to Asus LAN port 4, which isolates all other clients on <Asus LAN> from seeing <D-link client>, but I actually want the reverse.

Any ideas?

Hi
I have the exact same problem with a RT-AC66U and D-Link Dir-655. Have you found any solution to the problem?

 

[keenism]

I'm a massive linux scrub, so tread lightly, but it looks like "vconfig" can do what you want...apologies if I lead you on a goose chase.

 

[howarddavidp@gmail.com]

Hello,

I also need to make LAN PORT #4 only see the internet, and none of the other LAN ports. If I go with the Merlin Firmware add-on, or one of the others, will this enable this functionality?

Thanks,

David

 

[Grisu]

is there no solution for this or only nobody here who could show us the way to restrict one LAN-port for intranet, just like with an Guest-WLAN?

Please one of the profs here for help.

 

[john9527]

Search is your friend....

http://www.snbforums.com/threads/fo...guest-network-for-asus-merlin-rt-ac68u.18969/

If it's for a different router other than the AC68U, you can search for other posts that describe the port configurations that would need to be changed.

 

[Grisu]

Thanks to show me this thread, sorry that I am a little lost in this large forum and dont know what exactly search for.

Need it on a DSL-AC68U, but should work there as well, maybe need little modification for correct ports.