ax86u pro - guest iot vlan

[Sdr-99xrs]

Hello all. I am super confused but the guest network pro. I created a vlan, made it use DHCP, subnet mask allows 29 clients, with a random number for vlan id. I clicked set AP isolated . I also remember clicking something on the vlan tab isolating the ports.

What I don’t understand is the verbiage where it asks for “trunk” etc on the Ethernet ports. Do I need to do anything there. ?My devices are all wireless.

I also see that the devices connected to the vlan start with the same 6 digits in the ip then it switches on the 3rd octet. I have no way of knowing if I configured it correctly to where they are totally seperate from my main network and worry I could have opened a bigger can of worms , if that makes sense

 

[bennor]

What I don’t understand is the verbiage where it asks for “trunk” etc on the Ethernet ports. Do I need to do anything there. ?My devices are all wireless.

If all your GN IoT clients are WiFi, there is nothing you need to set or change on the Ethernet side under LAN > VLAN tab/section. The LAN > VLAN section is for configuring a LAN (wired Ethernet) port to use a specific GN VLAN.

 

[Sdr-99xrs]

So to confirm, once I pick the VLAN ID, It uses that number to set a different subnet and creates a wireless network for the clan devices. After checking isolate, it isolates it from the main. What am I missing here? I feel like it’s too easy..

 

[bennor]

So to confirm, once I pick the VLAN ID, It uses that number to set a different subnet and creates a wireless network for the clan devices. After checking isolate, it isolates it from the main. What am I missing here? I feel like it’s too easy..

If you want the Guest Network Pro Wireless Clients to be isolated from the main LAN, make sure to disable (set to off) the Guest Network Pro preset option "Use same subnet as main network", if it is available. And yes it actually is pretty easy (if limited) once you understand how Asus designed the Guest Network Pro presets to work.

In general/basic terms. The VLAN ID is a number for identifying the virtual LAN/SDN (software defined network). How you configure that VLAN is what determines if it is isolated from other networks on the router. When you set Use same subnet as main network to off/disabled, the VLAN creates a separate IP address subnet for the VLAN/SDN clients (both WiFi and wired VLAN clients). To learn more about what Guest Network Pro is and how it works, see the following Asus support documents:

[Guest Network Pro] What is Guest Network Pro? | Official Support | ASUS USA

[Wireless Router] What is VLAN and how to setup in ASUS Wireless Router? | Official Support | ASUS USA

 

[Sdr-99xrs]

Seems like a lot of people reference VLAN ID in the 20’s and or 50s is that the default vlan Id? Since there are say 4000 options why does everyone pick or have those low numbers?

 

[bennor]

Seems like a lot of people reference VLAN ID in the 20’s and or 50s is that the default vlan Id? Since there are say 4000 options why does everyone pick or have those low numbers?

Wild guess but considering many of Guest Network Pro/VLAN supported Asus routers (running stock Asus firmware) default to using 192.168.50.1 as the default (out of the box) router address. Its possible the Asus coders started with 50 because of that. Know that in my case with stock Asus 3006.x firmware it started at 52 because I initially used IoT Guest Network Pro preset before deleting it and then moved to using the Custom Network preset in Guest Network Pro to create two GNP SSID's. They were numbered 52 and 53 by default by the firmware. I didn't bother changing them.

 

[Sdr-99xrs]

So your lan ip is something like 192.168.40.x , 192.168.40.2, etc, for example, for regular devices, and the VLAN are 192.168.52.x for others meaning they’re on seperate subnet/isolated.