AX86U Pro - "block internet access" limited to 16 devices

[JG46]

My AX86U Pro will "block internet access" for devices that I specify. However, the feature is limited to a max of 16 devices, and would like to block access on 20 devices.

Is the "16" a hardware limitation of my router, or is it a limitation of my firmware (3.0.0.4.388_24199)?

Thanks!

 

[eibgrad]

This is usually a firmware limitation. They have to limit it to something since nvram (where the data is stored) is itself limited. IIRC, Merlin's firmware extends this to 32 devices. But even then, once you're using Merlin, it's a simple matter to implement your own blocking using a firewall script and get beyond even that limitation.

That's just another reason why so many ppl choose to use Merlin over the OEM firmware; it gives you more options.

 

[Tech9]

or is it a limitation of my firmware (3.0.0.4.388_24199)

This model has three 3.0.0.6 firmware releases after this version.

Any reason you don't want to try the new Pro firmware for your Pro router?

 

[Justinh]

@Tech9 is there something in 3.0.0.6 that might provide a solution?

 

[Tech9]

Perhaps Guest Network Pro with Kid’s Network profile and Internet access time schedule. I’m surprised someone with Pro router has no interest in new Pro features, available for months already.

 

[bennor]

Is the "16" a hardware limitation of my router, or is it a limitation of my firmware (3.0.0.4.388_24199)?

Have you looked into the Guest Network Pro feature of the RT-AX86U Pro stock Asus 3.0.0.6.102_34314 firmware to see if it suits your needs for blocking or limiting users? Or have you looked into Asus-Merlin 3004.388.8_2 firmware? Or as indicated above, one might be able to use their own firewall script to add additional client blocking when using Asus-Merlin firmware.

Asus-Merlin indicates a max of 64 clients for the Time Scheduling on a RT-AX86U Pro3004.388.8_2:

 

[Tech9]

Problem solved then. Firmware upgrade is needed.

 

[JG46]

Thanks for the help. I will update to the latest factory the firmware and take a look. I've not previously used Merlin, so I'm just a bit intimidated by making the switch.

Really what I am trying to do is create a VLAN of sorts in order to quarantine certain devices. But I don't have VLAN-capable switches, and I'm not sure if the VLAN capability in the latest ASUS router firmware is up to the task.

 

[bennor]

Thanks for the help. I will update to the latest factory the firmware and take a look. I've not previously used Merlin, so I'm just a bit intimidated by making the switch.

Really what I am trying to do is create a VLAN of sorts in order to quarantine certain devices. But I don't have VLAN-capable switches, and I'm not sure if the VLAN capability in the latest ASUS router firmware is up to the task.

If you haven't done so already, see the Asus support documents on Guest Network Pro and VLAN which are found in the 3.0.0.6.x firmware.

[Guest Network Pro] What is Guest Network Pro? | Official Support | ASUS USA

[Wireless Router] What is VLAN and how to setup in ASUS Wireless Router? | Official Support | ASUS USA

 

[Tech9]

RT-AX86U (non-Pro version) on Asuswrt 388_24243:

Seems like things changed from specific firmware version up.

 

[tiddlywink]

Thanks for the help. I will update to the latest factory the firmware and take a look. I've not previously used Merlin, so I'm just a bit intimidated by making the switch.

Really what I am trying to do is create a VLAN of sorts in order to quarantine certain devices. But I don't have VLAN-capable switches, and I'm not sure if the VLAN capability in the latest ASUS router firmware is up to the task.

You absolutely need to look into VLAN's as that is a lot of devices you don't want access to the internet. Your router has 3.0.0.6 for vlans: ASUS RT-AX86U Pro Firmware version 3.0.0.6.102_34314

Asus sells smart switches now:

https://www.bestbuy.com/site/asus-expertwifi-ebp15-smart-managed-poe-switch-white/6578389.p?skuId=6578389

EBG15 and EBG19P can both operate as vlan aware aimesh nodes as well.

 

[bennor]

Seems like things changed from specific firmware version up.

Yes appears to possibly be hardware/router specific on how many clients are supported. On a couple of RT-AC68U's, one running Asus stock 3.0.0.4.386_51685, the other running Asus-Merlin 386.14, the Client List max is 16 for both.

 

[Tech9]

On a couple of RT-AC68U's

Yes, not surprised. This model and multiple variants have limited NVRAM available. Last time I checked it was about 10KB free after clean boot on stock Asuswrt. The reason RMerlin reduced the number of VPN clients in Asuswrt-Merlin from 5 to 2 in 386.11 firmware.

 

[JG46]

If you haven't done so already, see the Asus support documents on Guest Network Pro and VLAN which are found in the 3.0.0.6.x firmware.

[Guest Network Pro] What is Guest Network Pro? | Official Support | ASUS USA

[Wireless Router] What is VLAN and how to setup in ASUS Wireless Router? | Official Support | ASUS USA

Thank you for the links. It's great news that ASUS is bringing more capability to their routers. Hopefully someone will do a write-up or a YT video on a VLAN implementation using ASUS router.

 

[JG46]

I can confirm that the "block internet access" limit up is 64 in the latest firmware (3.0.0.6.102_34314) for the RT-AX86U Pro . Thanks for your help.

I took a look at the VLAN functionality in the RT-AX86U Pro that is present in the latest firmware. As of now, ASUS has provided pretty sparse documentation (both on its website and within the firmware) about how it works. Hopefully, as the feature evolves and matures, more documentation will come out, and people will post online about how to use it. In the meantine, it's beyond me.

 

[bennor]

Yes information on Guest Network Pro settings and how to use it from Asus is a bit thin. There is the following video someone did that explains in general terms some of the features:

Beyond that Asus just has the various videos and links in the following for how to setup IoT, Kids, and a "Guest Portal" segmented networks.

[Guest Network Pro] What is Guest Network Pro? | Official Support | ASUS USA

What ever preconfigured option one uses there should, if I remember right, be the option (maybe in the Advanced settings section) to block internet access. If one has a number of network clients to block, just setup one of the Guest Network Pro entries, assign the clients to it, then block Internet access to that Guest Network Pro entry.

PS: Another video.

 

[JG46]

Thanks for the videos. That's the best info out there that I could find, but still too light on details for a noob like me.