ASUS RT-AX88U Pro

[acmsm]

Hi All,

I have bought an ASUS RT-AX88U Pro to place it in front of my ISP Router. One of the goals I had was to better organise my home network by creating vlans to compartimentalize my devices. So i have a main subnet (the router subnet) for the main devices, a vlan for the generic IoT, a vlan for home devices, and a vlan for IoT that cannot have internet access (ip cams for example).

I know now (my bad) that the ASUS RT-AX88U Pro is unable to block internet for vlans that are not on the router subnet. Such a basic functionality not present in a €250 router, but that is on me that didn't do my read correctly.

While I wait for a firmware upgrade that actually provides this (if ever), I was wondering if merlin firmware with specific addons will accomplish my goals: provides the current asus firmware functionality, but add, among other stuff, the ability to create a vlan/subnet/guest and control internet access for all or just a few specific devices on the vlan.

Thank you,
Antonio

 

[CaptainSTX]

Hi All,

I have bought an ASUS RT-AX88U Pro to place it in front of my ISP Router. One of the goals I had was to better organise my home network by creating vlans to compartimentalize my devices. So i have a main subnet (the router subnet) for the main devices, a vlan for the generic IoT, a vlan for home devices, and a vlan for IoT that cannot have internet access (ip cams for example).

I know now (my bad) that the ASUS RT-AX88U Pro is unable to block internet for vlans that are not on the router subnet. Such a basic functionality not present in a €250 router, but that is on me that didn't do my read correctly.

While I wait for a firmware upgrade that actually provides this (if ever), I was wondering if merlin firmware with specific addons will accomplish my goals: provides the current asus firmware functionality, but add, among other stuff, the ability to create a vlan/subnet/guest and control internet access for all or just a few specific devices on the vlan.

Thank you,
Antonio

Currently Merlin's firmware does not support VLANs. No commitment from him that it will ever be supported. On Merlin's firmware custom scripts are supported so depending on how what others have done and how good you are at modifying or writing scripts you might be able to accomplish what you want.

 

[acmsm]

Currently Merlin's firmware does not support VLANs. No commitment from him that it will ever be supported. On Merlin's firmware custom scripts are supported so depending on how what others have done and how good you are at modifying or writing scripts you might be able to accomplish what you want.

Are there any addons I can look at, such as Skynet or Yazfi I can look at?

Thank you for the reply

 

[bennor]

While I wait for a firmware upgrade that actually provides this (if ever), I was wondering if merlin firmware with specific addons will accomplish my goals: provides the current asus firmware functionality, but add, among other stuff, the ability to create a vlan/subnet/guest and control internet access for all or just a few specific devices on the vlan.

Possibly, if using Asus-Merlin firmware:

Tutorial - How to use VLANs on your non-pro Asus router with 386 or 388 code (no scripting required)

With 386 and 388 code base, you can make use of two built in VLANs (plus the main LAN VLAN 1) to further segment your wired and wireless network, even on non-pro models. This definitely works in router mode on all models that support AIMESH and these code versions. From what I have seen (but...

www.snbforums.com

For Guest Network WiFi devices, when using Asus-Merlin 388.x firmware, there is YazFi add-on script which extends the capabilities of the Guest Network WiFi including using YazFi's custom firewall rule's scripting to block access to the internet.

GitHub - jackyaz/YazFi: Feature expansion of guest WiFi networks on AsusWRT-Merlin, including SSID -> VPN, separate subnets per guest network, pinhole access to LAN resources (e.g. DNS) and more!

Feature expansion of guest WiFi networks on AsusWRT-Merlin, including SSID -> VPN, separate subnets per guest network, pinhole access to LAN resources (e.g. DNS) and more! - jackyaz/YazFi

github.com

https://github.com/jackyaz/YazFi?tab=readme-ov-file#custom-firewall-rules

YazFi - YazFi v4.x

v4.4.4 Updated 2023-11-26 Feature expansion of guest WiFi networks on AsusWRT-Merlin, including, but not limited to: * Dedicated VPN WiFi networks * Separate subnets for organisation of devices * Restrict guests to only contact router for ICMP, DHCP, DNS, NTP and NetBIOS * Allow guest networks...

www.snbforums.com

 

[PunchCardBoss]

While I wait for a firmware upgrade that actually provides this (if ever),

Consider using Administration > Feedback and send a feature suggestion like this.

Firmware Version:3.0.0.6.102_33340 for 'RT-AX88U. Please add "Block Internet Access" for VLAN devices.​

• Network Services Filter DOES NOT accept VLAN IPs
• Parental Controls DOES NOT work to block internet access for VLAN devices.

Please fix this deficiency.​