Example script for guest network

[antohagg]

I just got the TUF AX4200 (3.0.0.4.388_33506-gb8edbc3Revert) and was about to set up guest network, but unfortunately I saw that its not possible to set up guest network with my own specified Ip-range, nor was it possible to reserve ip-adresses for specified devices (MAC-adress). Also I wanted to specify one or two ethernet ports to be on the guest network only.
Since this router does not support merlin fw, is it possible to scrip this on the original fw?

Does anyone have an example script I could start with?

What I want is basicly a guest network (wifi 2.4 and 5GHz + 2 ethernet ports) with a custom ip-range, that is isolated from my main network (devices within the guest network should be able to comunicate with eachother). I only have this router and it is in router mode.

Thanks in advance!

 

[Tech9]

See this:

[OpenWrt Wiki] ASUS TUF-AX4200

openwrt.org

 

[antohagg]

Thanks, but was hoping I could stay on the stock fw, just with some scrips to set up the guest network instead of using the gui.

 

[Tech9]

What you want to do won't survive reboot on stock Asuswrt.

 

[antohagg]

What you want to do won't survive reboot on stock Asuswrt.

Was reading about USB-method described here, will this work?

Tutorial - How to automatically run a script on asus routers that monitors your WAN link - will reboot the router if WAN is down. (from POV of a non linux guy)

My hardware Asus RT-AX92U, I believe this may work for many other asus routers but I only have the RT-AX92U router so I cannot say if this works for other asus routers. Firmware 3.0.04.386.43084 Note: You need a USB stick to automate. First my issue and why I wanted to automate a reboot of...

www.snbforums.com

 

[ColinTaylor]

Was reading about USB-method described here, will this work?

Tutorial - How to automatically run a script on asus routers that monitors your WAN link - will reboot the router if WAN is down. (from POV of a non linux guy)

My hardware Asus RT-AX92U, I believe this may work for many other asus routers but I only have the RT-AX92U router so I cannot say if this works for other asus routers. Firmware 3.0.04.386.43084 Note: You need a USB stick to automate. First my issue and why I wanted to automate a reboot of...

www.snbforums.com

No, that method of running scripts on stock firmware has been removed by Asus.

 

[antohagg]

After a bit of google, it looks like there is a workaround.

GitHub - jacklul/asuswrt-scripts: Collection of scripts that can run on stock Asus routers (also on Merlin's firmware and forks)

Collection of scripts that can run on stock Asus routers (also on Merlin's firmware and forks) - jacklul/asuswrt-scripts

github.com

Haven't tried it but looks like it is going to work.

@Tech9 do you have an experience/example what to write in the script?

 

[Tech9]

Seems like this method uses the same usbmount trick and it doesn't work anymore.

 

[antohagg]

Seems like this method uses the same usbmount trick and it doesn't work anymore.

Thats a sucks. I guess i'm left with having to configure it manually after each reboot.

Any idea how to set up the script?

/A

 

[ColinTaylor]

After a bit of google, it looks like there is a workaround.

GitHub - jacklul/asuswrt-scripts: Collection of scripts that can run on stock Asus routers (also on Merlin's firmware and forks)

Collection of scripts that can run on stock Asus routers (also on Merlin's firmware and forks) - jacklul/asuswrt-scripts

github.com

Haven't tried it but looks like it is going to work.

You'd have to use the workaround described in the installation instructions on that page.

 

[rung]

Thats a sucks. I guess i'm left with having to configure it manually after each reboot.

Any idea how to set up the script?

/A

Note that if you really want to set up a new guest network, you will need to perform brctl and ifconfig commands to create/update the virtual bridge, modify the dnsmasq configuration to support the new ip range with dns and dhcp, and iptables commands to update the firewall rules. I've done that with Merlin but have no idea how one would do that with stock firmware.

 

[Tech9]

This is MediaTek hardware, not sure if brctl is used or even present.

 

[antohagg]

Note that if you really want to set up a new guest network, you will need to perform brctl and eifconfig commands to create/update the virtual bridge, modify the dnsmasq configuration to support the new ip range with dns and dhcp, and iptables commands to update the firewall rules. I've done that with Merlin but have no idea how one would do that with stock firmware.

Nice, if you have time, would you mind sharing some examples and I can work it out from there.

 

[rung]

Nice, if you have time, would you mind sharing some examples and I can work it out from there.

No problem. I think most of what you need (assuming you can make it work with your model) is here: Post

Note you would need to also add the wireless interface to the bridge as I just made a wired-only guest network in this post.

 

[Tech9]

You are lucky @antohagg to have OpenWrt supported hardware and trying to reinvent the wheel.