AX86u and Local Access

[sandiegoboy]

I am looking for some assistance. I am a newbie although comfortable with doing technical stuff

• I have an ASUS RT-AX86U (regular not the pro) on latest stock asus firmware
• I have several laptops connected via wifi and also LAN and many smartphones / smart TV / etc devices that connect to the network.
• I have some server type devices like a homeserver pc and 2 printers for example. I am trying to carefully control de access to these central devices on the network.
• I understand if I setup a guestwifi, I can configure so other devices don't connect to the rest of my home network
• However, I find this to be a weak form of security - for starters when somebody come home, my kids simply add them to the main wifi ...
• I understand the main network and the guest network are on separate vlans (main 192.168.1.x and guest 192.168.101.x)

My not working solution:
I thought ok, I know all the devices at home. I will usethe mac to assign manual static IPs on the 192.168.1.x ). Then any other device would get DHCP, so I will set DHCP to be on 192.168.101.x. The interface rejects this network

Please if anybody has a way to solve for this I would much appreciate it, specially if I don't need to flash a different a different firmware

 

[ColinTaylor]

• I understand if I setup a guestwifi, I can configure so other devices don't connect to the rest of my home network
• However, I find this to be a weak form of security - for starters when somebody come home, my kids simply add them to the main wifi ...

Unless I'm missing the obvious, the solution is to tell your kids that these "other people" are only allowed to connect to the guest network. If your kids can't be trusted to do that then change the password to the main network and don't tell your kids what the password is.

My not working solution:
I thought ok, I know all the devices at home. I will usethe mac to assign manual static IPs on the 192.168.1.x ). Then any other device would get DHCP, so I will set DHCP to be on 192.168.101.x. The interface rejects this network

Manually assigning IP addresses is not a workable solution. However you could use the Wireless MAC Filter on the main (not guest) wireless networks. You'd need to set MAC Filter Mode = Accept and then specify every allowed client.

 

[sandiegoboy]

Ok, I am looking at this from a wrong angle. After much reading I have other questions relating setup I will post separately
Happy to close this just down know how