I reported this. Further troubleshooting revealed that this is not specific to the Merlin firmware, but an Asus implementation issue in general — the same occurs with the latest 386 Asus baseline and the recently released 388 Asus baseline for the GT-AXE16000. The issue is that the GT-AXE16000 does establish the appropriate VLANs (VLAN ID 501 for 2.4 GHz, VLAN ID 502 for 5 GHz, and, I assume, VLAN ID 503 for 6 GHz) on the AiMesh node(s). Using "brctl show" via ssh makes it completely clear (see screenshots). I have been attempting to address this via Asus tech support for about 3 weeks, but I have not had any success as of yet.Read a post somewhere either in this thread or another about Guest Network issues on the 388 beta. On 388.1 beta 3 on my AXE16000, Guest Network clients on the 2.4 GHz band cannot connect to the internet if "Allow intranet access" is set to disabled.
I reported this. Further troubleshooting revealed that this is not specific to the Merlin firmware, but an Asus implementation issue in general — the same occurs with the latest 386 Asus baseline and the recently released 388 Asus baseline for the GT-AXE16000. The issue is that the GT-AXE16000 does establish the appropriate VLANs (VLAN ID 501 for 2.4 GHz, VLAN ID 502 for 5 GHz, and, I assume, VLAN ID 503 for 6 GHz) on the AiMesh node(s). Using "brctl show" via ssh makes it completely clear (see screenshots). I have been attempting to address this via Asus tech support for about 3 weeks, but I have not had any success as of yet.
This was a problem on all models in the firmware versions just before 388 - but fixed I think as per this entry in the Change Log ...Read a post somewhere either in this thread or another about Guest Network issues on the 388 beta. On 388.1 beta 3 on my AXE16000, Guest Network clients on the 2.4 GHz band cannot connect to the internet if "Allow intranet access" is set to disabled.
- FIXED: Clients connected to Guest Network 1 aren't
redirected if NTP interception is enabled.
Yeah, I also flashed the official 388 firmware and reset - same problem. Definitely no internet access when that Intranet block is enabled.This was a problem on all models in the firmware versions just before 388 - but fixed I think as per this entry in the Change Log ...
RT-AX86U definitely works now with above fix - and have been able to redirect all Guest traffic via VPN Client using VPN Director to internet.Code:- FIXED: Clients connected to Guest Network 1 aren't redirected if NTP interception is enabled.
In version 386 I had to use YazFi to sort the problem of keeping Guests out of my LAN and still giving them internet access!
Maybe you need to re-apply beta3 firmware and if that still doesn't fix ... you may have to do full reset and manual rebuild?
EDIT: - Ignore above ... I did not see subsequent responses to your original post. Seems the problem is specific to your router model :-(
Yep - System tab on Administration page - under "Basic Config"...Yeah, I also flashed the official 388 firmware and reset - same problem. Definitely no internet access when that Intranet block is enabled.
Is NTP interception enabling the local time server option in System settings?
Got it. I've never enabled that option as I have no need for it just yet. Will attempt to continue to work with Asus to try to remedy the problem tomorrow and see how far I can get.Yep - System tab on Administration page - under "Basic Config"...
View attachment 45843
It's always been accurate though with speed test providers on 386 codebase with Adaptive QOS (manual) and throughout history. This 388 build is wild and anywhere from 280-660mbps.
On my 1gbps connection, it only has a 52mbps upstream used for Emby streaming so that's why I like QOS normally My cable tv broadband provider is likely to go 100-120mbps at some point, and I have a symmetric 1gbps FTTP connection coming as another provider is currently putting the infrastructure in.
I'm not familiar with Asus stock firmware, does it have Cake as a QOS option, or is that a Merlin implementation?I appreciate to Merlin that QOS is likely a closed shop from Asus and he can do nothing, and the code is likely shared amongst some Asus models.
It's been rumbling for a while and probably won't be addressed by Asus for some releases yet....
I'm not familiar with Asus stock firmware, does it have Cake as a QOS option, or is that a Merlin implementation?
Asus stock does not have Cake QOS.I'm not familiar with Asus stock firmware, does it have Cake as a QOS option, or is that a Merlin implementation?
I had the same issue before. It was automatically enabled, maybe because I had blocked one device for internet access. When upgrading to new firmware, this port forwarding switched on automatically, every time. Maybe you have blocked devices to internet/WAN? In my case I block printer for internet access.@RMerlin
It was spoke a lot here but without any reasonable answer, this port forward rule- what makes it?
I have no fetaure available for Parental Control, or Trend Micro...
Something you are aware of?
Taken from AX88U
Thank you
View attachment 45816
Happened to me too, that's why I mentioned it above.maybe because I had blocked one device for internet access
Have you tried Cake? It does turn off all acceleration the router has, but it's simple to use and just works.I appreciate to Merlin that QOS is likely a closed shop from Asus and he can do nothing, and the code is likely shared amongst some Asus models.
It's been rumbling for a while and probably won't be addressed by Asus for some releases yet....
think cake shouldn't be used over 350mbps due to processing overhead?Have you tried Cake? It does turn off all acceleration the router has, but it's simple to use and just works.
Nope, it does turn off all additional hardware acceleration though if that's what you mean, so speed tests don't look as nice but traffic is well managed and rarely has problems. If download and upload speed tests scare you then it's not for you. If performance and Que management is what you want, Cake is the Boss!think cake shouldn't be used over 350mbps due to processing overhead?
Welcome To SNBForums
SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.
If you'd like to post a question, simply register and have at it!
While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!